Alternatives to firewalld
A dynamically managed Linux firewall daemon with network zones and a D-Bus interface. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
firewalld
A dynamically managed Linux firewall daemon with network zones and a D-Bus interface.
Replacements
Listings that take over the same core job as firewalld.
ufw
Uncomplicated Firewall, a command-line tool for managing a netfilter firewall on Linux.
ufw is a GPL-3.0 command-line Linux firewall tool with short allow and deny commands and application profiles, but it lacks zones and is less expressive than firewalld.
OpenSnitch
An interactive application firewall for Linux that asks before letting any program make an outbound connection.
OpenSnitch is a GPL-3.0 Linux application firewall that prompts per program on outbound connections and can configure nftables inbound policy, adding a steady stream of prompts at first.
Similar software
Related functionality, not a direct replacement.
Fail2ban
Log-watching daemon that bans addresses after repeated authentication failures.
CrowdSec
Detect suspicious behavior in server logs and web traffic.
AppArmor
A Linux kernel security module that confines programs to the actions allowed in per-application profiles.
SELinux
The userland libraries and tools for Security Enhanced Linux, the kernel's mandatory access control system.
OPNsense
An open-source firewall and routing platform based on FreeBSD that you install on your own hardware.
IPFire
A hardened Linux-based firewall distribution with VPN support, network segmentation and a web management console.
