Please see for up-to-date releases and information. FireHOL is a stateful iptables packet filtering firewall configurator. It is abstracted, extensible, easy and powerful. It can handle any kind of firewall, but most importantly, it gives you the means to configure it, the same way you think of it.


  • stateful packet filtering via netfilter (iptables) connection tracking
  • bidirectional firewall (protects you from outside but also enforces policy for internet usage to your clients)
  • high level configuration - you write does the obvious, the rest are handled by firehol
  • unlimited number of firewalling rules
  • unlimited number of interfaces
  • unlimited number of firewalling zones, which can be defined using a dynamic set of criteria (including nested ones)
  • supports all kinds of NAT (MASQ, SNAT, DNAT, REDIRECT, etc)
  • supports transparent proxies (which can be applied on all or subsets of the clients, the servers, or the local machine users)
  • cooperates with VPN software (GRE, IPIP, IPSEC, OpenVPN) and allows PPTP clients and servers
  • extensible via plugin modules
  • firewalling rules can use any matching criteria (IPs, ports, protocols, etc), including any netfilter module available

Project Activity

See All Activity >

Follow FireHOL

FireHOL Web Site

Other Useful Business Software

One Backup & Disaster Recovery Solution for Any Need One Backup & Disaster Recovery Solution for Any Need Icon
One Backup & Disaster Recovery Solution for Any Need Icon

SherWeb Online Backup Is Your Easy Solution for Cloud & Local Backups. The App Is Free, Pay Only for the Cloud Data Storage.

With the diversity of IT solutions used, managing backup and disaster recovery can turn very complex for a business. SherWeb Online Backup simplifies everything. You back up servers, desktops, virtual machines and smart devices, plus popular applications and Office 365 data – all from a single web-based console. Active Protection, the embedded anti-ransomware feature, adds a security layer while the Cloud-to-Cloud feature saves network bandwidth.

Rate This Project

Login To Rate This Project

User Ratings

ease 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5
features 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5
design 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5
support 1 of 5 2 of 5 3 of 5 4 of 5 5 of 5 0 / 5

User Reviews

  • Best way to manage IP tables bar none with great developer support.

  • Easy to configure, statefull - great!

  • Great product, much simpler than directly working with iptables. But, it is not trivial. If you use the examples (there are a lot) its easy, but if you have to come up with your own solution, you still need to understand the concept of routing quite well.

Read more reviews >

Additional Project Details



Intended Audience

Telecommunications Industry, Advanced End Users, System Administrators, Developers, End Users/Desktop, Quality Engineers

User Interface

Console/Terminal, Command-line

Programming Language

Unix Shell