About the project

Firewalls deserve better tooling

FYRwall is a safe, focused, modern web-based firewall administration platform for Linux. It gives administrators a clean GUI over UFW and iptables without ever running the web server as root, without shell interpolation anywhere, and without a single firewall mutation that lacks a restore point and rollback path.

Core guarantees

• The web/API server runs unprivileged. Only the tiny local agent touches the firewall, through a strictly permissioned Unix socket.
• Every privileged operation is a strongly typed, allowlisted request. There is no generic exec endpoint and no shell string anywhere in the codebase.
• Every firewall mutation follows the full pipeline: authorize, lock, validate, detect conflicts, snapshot, apply, re-read, verify, and automatic rollback on any failure after the snapshot step.
• Firewall ownership detection blocks writes whenever multiple independent managers are active. Nothing is ever disabled silently.
• Failed or suspicious changes roll back automatically. Rollback failure raises a critical notification, never a silent success.

PotenFYR Studios

FYRwall is built by PotenFYR Studios, a small open-source studio. The org keeps its tools open and auditable under Apache-2.0 with the Commons Clause: free to use, self-host and embed, but nobody resells it as-is.

License

FYRwall is licensed under the Apache License 2.0 with the Commons Clause: free to use, study, modify, self-host and redistribute, and embedding it inside a larger product is welcome. Selling FYRwall itself as a paid product or managed host is the one bright line. See the license page - and the LICENSE file, which is authoritative.

Made with <3 by PotenFYR Studios