Dynamic Firewall Authorizer

github.com

4 pointsulfox2 comments

Hello everyone, I finished today this dynamic firewall app written in go. It is able to manage netfilter rules via nftables in order to whitelist hosts that are resolved via a trusted DNS.

It lacks some features like dnssec, iptables, ipv6 but they are in the ToDo and they will be available soon.

What do you think?

Like the idea of using DNS as additional filter criteria.

Any plans to port this concept to Windows so that more users would be able to configure it at the level of their client network interface rather than at the level of the router, which in many networks might not even be under their control?

Reply on news.ycombinator.com