{"id":21260323,"url":"https://github.com/nlm/firval","last_synced_at":"2025-08-13T18:15:05.140Z","repository":{"id":57429781,"uuid":"20595608","full_name":"nlm/firval","owner":"nlm","description":"a netfilter firewall rules generator designed to be easier to read, write and maintain","archived":false,"fork":false,"pushed_at":"2015-12-03T10:32:48.000Z","size":142,"stargazers_count":4,"open_issues_count":2,"forks_count":0,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-11-08T02:20:13.813Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nlm.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-06-07T15:03:32.000Z","updated_at":"2021-12-23T13:34:49.000Z","dependencies_parsed_at":"2022-08-26T04:42:54.186Z","dependency_job_id":null,"html_url":"https://github.com/nlm/firval","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nlm%2Ffirval","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nlm%2Ffirval/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nlm%2Ffirval/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nlm%2Ffirval/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nlm","download_url":"https://codeload.github.com/nlm/firval/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225669580,"owners_count":17505403,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-21T04:17:41.894Z","updated_at":"2024-11-21T04:17:42.468Z","avatar_url":"https://github.com/nlm.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"firval\n======\n\na netfilter firewall rules generator designed to be easier to read, write and maintain\n\nInstall\n=======\n\n    git clone https://github.com/nlm/firval\n    pip install ./firval\n\nHow to use\n==========\n\nWrite a yaml configuration file and feed it to firval.py,\nit will produce a iptables-restore compatible rule file\n\nit means you can do this:\n\n    cat rules.yaml | firval | iptables-restore\n\nConfiguration syntax\n====================\n\n    interfaces:\n      IFNAME: PHYSICALINTERFACE\n\n    addresses:\n      ADDRNAME: HOSTADDR | NETADDR\n\n    ports:\n      PORTNAME: PORTNUMBER\n\n    chains:\n      filter|nat|mangle:\n        CHAINNAME:\n          - RULE\n          - ...\n\n    services:\n      SERVICENAME:\n        proto: tcp | udp | icmp\n        port: PORT-NUMBER(,PORT-NUMBER)* (only for tcp or udp)\n        type: ICMP-TYPE (only for icmp)\n\n    rulesets:\n      IFNAME-to-IFNAME:\n        filter|nat|mangle:\n          input|forward|output|...: (availability depends if in 'filter', 'nat' or 'mangle')\n            - RULE\n            - ...\n\n    RULE = ((accept|reject|drop|masquerade|log|nflog)\n            ((not)? from ADDRNAME ((not)? port PORTNAME)?)?\n            ((not)? to ADDRNAME ((not)? port PORTNAME)?)?\n            ((not)? proto (tcp|udp|icmp|any))?\n            (service SERVICENAME)?\n            (state (new|established|invalid))?\n            (limit INTEGER/TIMEUNIT (burst INTEGER)?)?\n            (comment \"COMMENT\")?\n            (prefix \"LOG_PREFIX\"))\n            | (jump CHAINNAME)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnlm%2Ffirval","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnlm%2Ffirval","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnlm%2Ffirval/lists"}