Netfilter Python Packages

fgex

Firegex, a firewall for Attack-Defense CTFs

firewallfabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

firegex

Firegex, a firewall for Attack-Defense CTFs

ferm

ferm for iptables/nftables, ported to Python - one config language, four netfilter families

network-sandbox-engine

A visual, deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic safely, providing real-time visual feedback via a Svelte/FastAPI interface.

scapy-nflog-capture

Driver for scapy to allow capturing packets via Linux NFLOG interface

nfsinkhole

nfsinkhole is a Python library and scripts for setting up a Unix server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).