Turtle Firewall allows you to configure a Linux firewall in a simple and fast way. You can define the different firewall elements (zones, hosts, networks, geoips and ipsets) and then set the services (port or dpi) you want to control (allow, deny, ratelimit, mark or log) among the different elements or groups of elements. You can do this by simply editing a XML file or using the web interface (webmin).
Turtle Firewall is an Open Source project written using the perl language and realeased under GPL version 2.0 by Andrea Frigido (frisoft).
- Time, GeoIP and nDPI based rules.
- Blacklists and Flow Risks.
- Rate Limit Support.
- Logging per Rule. ( target ACCEPT logs flow, target DROP/REJECT logs action )
- Flow Statistics. ( via Netflow nDPI classified historical flow data to disk )
- Connection Marking. ( for use with tc and iproute )
- Connection Tracking. ( for use with CT helpers )
- Linux Kernel 6.x or newer
- expat library installed.
- XML::Parser perl module installed.
- Webmin installed. (webmin)
- iptables command in PATH.
- Standard Netfilter kernel modules :
nf_tables,
nf_conntrack,
xt_connmark,
xt_time,
xt_set,
xt_tcpmss. - Extra Netfilter kernel modules :
xt_ndpi, (vel21ripn)
xt_geoip, (jengelh)
xt_ratelimit. (aabc)
Big thanks to our contributors!
- John Cameron (netcons)
- Giampaolo Tomassoni
- Mark Francis
- Alain Terriault
- Jimmy Collins
- Joe MacDonald
- Chris Carter
- Patrik
- Fredrik Tuomas
- Karl Lovink
- Frank Förster