Sanewall can generate firewall rules using an extremely simple but powerful configuration language based on bash. using simple syntax, it is possibleto design any kind of local or routing stateful packet filtering firewall with ease.

sanewall is a fork of firehol which was made when development of that project stalled: all existing firehol definitions should be compatible.

this package contains documentation and examples.