Netfilter Python Packages

firewallfabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

fgex

Firegex, a firewall for Attack-Defense CTFs

firegex

Firegex, a firewall for Attack-Defense CTFs

network-sandbox-engine

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic safely.

route-explain

Inspect the route Linux selects for a flow and the rules and tables behind it.

nfsinkhole

nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).

ferm

ferm for iptables/nftables, ported to Python - one config language, four netfilter families

scapy-nflog-capture

Driver for scapy to allow capturing packets via Linux NFLOG interface