enforza/enforza-cockpit

enforza-cockpit is a free web-based tool for managing a Linux firewall through your browser instead of typing commands. It is built as a plugin for Cockpit, an existing web console for managing Linux servers, and it gives you a visual editor for building firewall rules that get turned into a real nftables firewall running on the machine. With it, a single Linux server can act as a firewall, a router, and its own management console, all without any extra software or outside service. You can filter traffic coming into the machine, passing through it, or leaving it, organized into three sections in the interface. You can also turn on routing so the machine forwards traffic between its network connections, and set up outbound traffic to be masqueraded so the box works as a gateway for other devices behind it. A safety feature protects you from locking yourself out: after applying a new firewall rule, you have sixty seconds to confirm it, and if you do not, the previous working rules are automatically restored. This project shares its visual design with a paid product from the same company, called the enforza Cloud Controller, but this free version only wraps the standard nftables firewall built into Linux. The paid product adds extra capabilities, such as filtering traffic by website address, managing many firewalls from one place, and generating compliance reports, none of which are included here. Setup involves cloning the repository, running a setup script that installs the needed packages like nftables and Cockpit itself for your Linux distribution, then running a second script to install the plugin into Cockpit. After that, you open Cockpit in a web browser, log in with a system account that has administrator access, and find the firewall plugin in the menu. The full README is longer than what was shown.