Very fast firewall configuration tool


Pyroman is a firewall tool written in Python for complex networks, but it can of course also handle simple single-host-single-link setups.

Interesting features:
 * Fast, due to use of iptables-restore for mass setting of rules
 * Rollback to previous firewall configuration on errors
 * Safety options to prevent mistakes in configuration (success confirmation
   prompt and/or scripted external verification)
 * Detailed error reporting
 * Lots of verification checks done before execution
 * Powerful yet clean configuration files (in Python and/or XML)
 * Designed for multiple hosts, firewalls, networks
 * Consistent firewalls for IPv4 and IPv6
 * Can print static rules in single-shot usage to load with other tools
   such as iptables-restore and iptables-persistent, or to manually adapt

Pyroman is inspired by Shorewall and FireHOL, but tries to improve upon them with respect to performance and ease of configuration.

Pyroman currently only configures iptables/netfilter firewalls, it does not include configuration utilities for setting up VPN or traffic shaping.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V


Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install pyroman