SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python Firewall Projects
-
Project mention: GitHub is investigating unauthorized access to their internal repositories | news.ycombinator.com | 2026-05-19
the pop-ups fatigue is already an issue, and not an easy one to solve. Pretty much like SIEM/SOC alerts.
> The trick is to infect a plugin that has a legitimate reason for accessing the internet or running certain commands, and then coming up with ways to abuse that to exfiltrate the data. Or exfiltrating via DNS queries, or some other vector that isn't so obvious as "allow TCP/UDP connections to the whole world".
They'll get there, maybe. But the reality is that right now, everyone allows outbound requests blindly.
Instead of speculating, I suggest to actually investigate current IOCs and common tactics of malicious npm/pip/plugins/VS extensions. Something like this:
https://github.com/evilsocket/opensnitch/discussions/1119
Or use OpenSnitch (or Lulu, Glasswire, ZoneAlarm anyone?:D etc) to actually analyze real VS malicious extensions or npm packages and see if it stops the exfiltration, and if not, suggest ways to improve it. For example:
https://markdownpastebin.com/?id=9c294c75f09349d2977a4ccd250...
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
evilwaf
evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
Project mention: Evilwaf – MitM Firewall bypass proxy and WAF vulnerability scanner | news.ycombinator.com | 2026-03-20 -
-
-
-
pan-os-python
The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.
-
OPNsensePIAWireguard
This script automates the process of getting Wireguard setup on OPNsense to connect to PIA's NextGen Wireguard servers. It will create Wireguard Instance(Local) and Peer(Endpoint) on your OPNsense setup.
-
dnxfirewall
DNXFIREWALL® and DAD'S NEXT-GEN FIREWALL™, a C/CPython hybrid next generation firewall built on top of Linux and bound to kernel/ netfilter hooks for packet control.
-
You can block at your gateway/router. Lots of places have country IP ranges[1], and there are even more or less frequently updated lists of 'malicious' IP ranges[2]. Some gateway providers include 'block by country' and/or 'download blocklists automatically' as a feature.
[1] e.g. https://github.com/ipverse/geo-ip-blocks
[2] e.g. https://github.com/bitwire-it/ipblocklist
-
-
the-great-gpt-firewall
🤖 A curated list of websites that restrict access to AI Agents, AI crawlers and GPTs
-
socialclub-notification-blocker
Next-generation firewall (NGFW) that supports blocking SocialClub Overlay notifications.
-
-
-
DirectFire_Converter
DirectFire Firewall Converter - Network Security, Next-Generation Firewall Configuration Conversion, Firewall Syntax Translation and Firewall Migration Tool - supports Cisco ASA, Fortinet FortiGate (FortiOS), Juniper SRX (JunOS), SSG / Netscreen (ScreenOS) and WatchGuard (support for further devices in development). Similar to FortiConverter, SmartMove, Expedition etc.
-
-
-
Project mention: Announcing udwall: A New Tool for Making UFW and Docker Play Nice With Each Other | dev.to | 2025-11-23
Check out the repository here: https://github.com/HexmosTech/udwall
-
Inversion-DNSBL-Generator
Generate malicious URL blocklists for DNSBL applications like pfBlockerNG or Pi-hole by scanning various public URL sources using the Safe Browsing API from Google and/or Yandex.
-
-
Project mention: Show HN: DDoS detection in 500 lines of Python (MIT, no cloud, no account) | news.ycombinator.com | 2026-05-26
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python Firewall discussion
Python Firewall related posts
-
Little Snitch comes to Linux, but the core logic is closed source
-
LittleSnitch for Linux: OpenSnitch Is the Outbound Firewall You've Been Waiting For [2026]
-
Gnome calculator pings the International Monetary Fund website
-
Show HN: Sinkzone DNS forwarder that blocks everything except your allowlist
-
First Contact – New in Little Snitch Mini 1.8
-
Ransomware malware targeting Linux Desktop users spotted in the wild
-
Little Snitch: Network Monitor and Application Firewall for macOS
-
A note from our sponsor - SaaSHub
www.saashub.com | 9 Jun 2026
Index
What are some of the best open-source Firewall projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | opensnitch | 13,713 |
| 2 | Awesome-WAF | 7,499 |
| 3 | firewalld | 1,029 |
| 4 | evilwaf | 784 |
| 5 | qomui | 558 |
| 6 | ansible-opnsense | 469 |
| 7 | opensnitch | 396 |
| 8 | pan-os-python | 395 |
| 9 | OPNsensePIAWireguard | 250 |
| 10 | dnxfirewall | 222 |
| 11 | ipblocklist | 192 |
| 12 | findwall | 104 |
| 13 | the-great-gpt-firewall | 96 |
| 14 | socialclub-notification-blocker | 92 |
| 15 | fortigate-api | 90 |
| 16 | windows_tools | 75 |
| 17 | DirectFire_Converter | 61 |
| 18 | guardian | 59 |
| 19 | BlackListBox | 48 |
| 20 | udwall | 31 |
| 21 | Inversion-DNSBL-Generator | 29 |
| 22 | PyWall | 27 |
| 23 | ftagent-lite | 21 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com