From Funtoo
Jump to: navigation, search



We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

Firewalld is from our fedora friends. Firewalld comes with a gui if the use flag is activated for it. Firewalld is a daemon that is on top of iptables, ebtables, & nftables. Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules. Package:Sshguard can be used along side firewalld to dynamically block attackers. Firewalld is very tightly integrated with Package:NetworkManager.


firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things. it's really bad, pre alpha quality. go to nftables, or iptables now. or use the firewalld-0.3.x series.




If you would like an application to configure firewalld, set the gui use flag.

# emerge net-firewall/firewalld


# rc-update add consolekit
# rc-update add dbus default
# rc-update add iptables default
# rc-update add ip6tables default
# rc-update add ebtables default
# rc-update add nftables default
# rc-update add firewalld default
# rc

you may need to run rc-service {ip,eb,nf}tables save to enable these services to start


firewall-applet (gui systray icon)
firewall-config (gui configuration menus)
firewall-offline-cmd -h (many command line options
firewall-cmd -h (command line back end to firewall-config)
firewalld (command line firewall daemon control)


If the gui is merged in, to load it:

# firewall-applet

External Resources