SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python Firewall Projects
-
I'm aware, and I'm choosing GOG when I can now, though even then I see phoning home (or attempts to) happening (opensnitch is useful for that https://github.com/evilsocket/opensnitch) - I've paid for some titles 2-3x over which is frustrating, admittedly I don't have the physical media from the first time which is on me, but it's frustrating seeing single player games wanting to phone home
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
-
-
evilwaf
evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
Project mention: Evilwaf – MitM Firewall bypass proxy and WAF vulnerability scanner | news.ycombinator.com | 2026-03-20 -
HOL Guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
pan-os-python
The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.
-
-
OPNsensePIAWireguard
This script automates the process of getting Wireguard setup on OPNsense to connect to PIA's NextGen Wireguard servers. It will create Wireguard Instance(Local) and Peer(Endpoint) on your OPNsense setup.
-
dnxfirewall
DNXFIREWALL® and DAD'S NEXT-GEN FIREWALL™, a C/CPython hybrid next generation firewall built on top of Linux and bound to kernel/ netfilter hooks for packet control.
-
-
You can block at your gateway/router. Lots of places have country IP ranges[1], and there are even more or less frequently updated lists of 'malicious' IP ranges[2]. Some gateway providers include 'block by country' and/or 'download blocklists automatically' as a feature.
[1] e.g. https://github.com/ipverse/geo-ip-blocks
[2] e.g. https://github.com/bitwire-it/ipblocklist
-
-
the-great-gpt-firewall
🤖 A curated list of websites that restrict access to AI Agents, AI crawlers and GPTs
-
-
socialclub-notification-blocker
Next-generation firewall (NGFW) that supports blocking SocialClub Overlay notifications.
-
preloop
The open-source AI agent control plane: MCP firewall, model gateway with budgets, human approvals, runtime observability, and audit trails (by preloop)
Project mention: Show HN: Preloop: Open-source control plane for AI agents. See, govern, cut cost | news.ycombinator.com | 2026-07-28 -
-
-
DirectFire_Converter
DirectFire Firewall Converter - Network Security, Next-Generation Firewall Configuration Conversion, Firewall Syntax Translation and Firewall Migration Tool - supports Cisco ASA, Fortinet FortiGate (FortiOS), Juniper SRX (JunOS), SSG / Netscreen (ScreenOS) and WatchGuard (support for further devices in development). Similar to FortiConverter, SmartMove, Expedition etc.
-
-
Project mention: Announcing udwall: A New Tool for Making UFW and Docker Play Nice With Each Other | dev.to | 2025-11-23
Check out the repository here: https://github.com/HexmosTech/udwall
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python Firewall discussion
Python Firewall related posts
-
Test whether your agent oversight survives a reworded plan
-
If You Can't Hold It, You Don't Own It
-
vrp-ir 0.9.0: a line-cited security audit for Huawei VRP/USG configs
-
Little Snitch comes to Linux, but the core logic is closed source
-
LittleSnitch for Linux: OpenSnitch Is the Outbound Firewall You've Been Waiting For [2026]
-
Gnome calculator pings the International Monetary Fund website
-
Show HN: Sinkzone DNS forwarder that blocks everything except your allowlist
-
A note from our sponsor - SaaSHub
www.saashub.com | 16 Oct 2026
Index
What are some of the best open-source Firewall projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | opensnitch | 14,165 |
| 2 | Awesome-WAF | 7,649 |
| 3 | firewalld | 1,049 |
| 4 | evilwaf | 908 |
| 5 | HOL Guard | 850 |
| 6 | qomui | 559 |
| 7 | ansible-opnsense | 498 |
| 8 | pan-os-python | 402 |
| 9 | opensnitch | 395 |
| 10 | OPNsensePIAWireguard | 265 |
| 11 | dnxfirewall | 221 |
| 12 | gufw | 221 |
| 13 | ipblocklist | 192 |
| 14 | findwall | 103 |
| 15 | the-great-gpt-firewall | 101 |
| 16 | fortigate-api | 95 |
| 17 | socialclub-notification-blocker | 92 |
| 18 | preloop | 77 |
| 19 | windows_tools | 76 |
| 20 | guardian | 71 |
| 21 | DirectFire_Converter | 61 |
| 22 | BlackListBox | 52 |
| 23 | udwall | 34 |
Sponsored
Monitoring that respects your time & budget
APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
www.appsignal.com