Iptables Python Packages

cnsl

Security Layer CNSL Brain

firewallfabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

cidre-cli

A CLI tool for fetching and managing CIDR IP ranges from RIRs with firewall integration.

geoipsets

Python package to generate country-specific IP network ranges consumable by both iptables/ipset and nftables.

nfsinkhole

nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).

tcpstat

A TCP port traffic monitor.

ferm

ferm for iptables/nftables, ported to Python - one config language, four netfilter families

pyfluffy

Fluffy - A Firewall as a Service for Linux

upf

Uncomplicated Port Forwarder (UPF)

fwgen

A small framework that simplifies the management of complex ip(6)tables based firewalls and makes remote deployments significantly more robust

iptables-xt-recent-parser

Tool used for converting Linux Kernel time jiffies, from iptables xt_recent timestamps, to human datetime

iptables-dynamic

Dynamically save and restore iptables rules for some chain(s)

cloudflare-only-nginx

CloudFlare-only nginx

nginx-defender

A lightweight, real time log monitoring tool designed to detect and block IP addresses exhibiting abusive behavior such as brute force attacks, excessive requests, or suspicious patterns. Automatically integrates with your server’s firewall (iptables or ufw) to block offenders and protect web services without relying on external services.

ezipset

IPSet is a lightweight and fast Python library for manipulating IPSet rules. No dependencies, pure Python!