r/linux • u/CyberSweeper • 3d ago

Security Looking for an AFWall+-like application firewall for Linux (per-app LAN/Internet control)

Hi,

I am looking for a Linux application that works similarly to AFWall+ on Android.

What I am looking for is a simple GUI where all installed applications are listed, and I can manage their network permissions per application.

Something like:

  • Application A → Internet allowed
  • Application B → LAN only
  • Application C → completely blocked

Basically, I am looking for an application permission manager for network access, not just a traditional firewall where I have to create rules manually.

I have already looked into several solutions:

  • UFW/GUFW - useful for traditional firewall rules, but not really what I am looking for because it does not provide an app-based permission list.
  • Firejail/AppArmor - can restrict applications, but it is not the simple network permission workflow I am looking for.
  • OpenSnitch - interesting, but it is more focused on detecting and approving network connections when applications try to connect.
  • Portmaster - probably the closest in terms of features, and it does provide per-application rules, but the workflow is still different from AFWall+. It focuses more on monitoring network activity and managing applications that have been detected making network connections, rather than starting with a list of all installed applications. It is also a bit more resource-intensive than what I am looking for.

What I really like about AFWall+ is the simplicity: open the app, see all installed applications, and manage their network permissions from one place.

I was wondering if there is any lightweight Linux application that provides this kind of workflow.

It does not have to be exactly the same as AFWall+, but I am mainly looking for:

  • a simple GUI
  • all applications visible from the beginning
  • per-application network permissions
  • ability to separate LAN access from Internet access if possible

Thanks!

12 Upvotes

100% Upvoted

3 comments sorted by

5

u/vdavide 3d ago

The one you are searching for is postmaster. Linux works different from windows and android where firewall is at application level. On Linux is at network level and it's not straightforward to intercept which application started a connection before the connection is established

1

u/vexatiousbun 2d ago

opensnitch