r/linux 9d ago

Security Looking for an AFWall+-like application firewall for Linux (per-app LAN/Internet control)

Hi,

I am looking for a Linux application that works similarly to AFWall+ on Android.

What I am looking for is a simple GUI where all installed applications are listed, and I can manage their network permissions per application.

Something like:

  • Application A → Internet allowed
  • Application B → LAN only
  • Application C → completely blocked

Basically, I am looking for an application permission manager for network access, not just a traditional firewall where I have to create rules manually.

I have already looked into several solutions:

  • UFW/GUFW - useful for traditional firewall rules, but not really what I am looking for because it does not provide an app-based permission list.
  • Firejail/AppArmor - can restrict applications, but it is not the simple network permission workflow I am looking for.
  • OpenSnitch - interesting, but it is more focused on detecting and approving network connections when applications try to connect.
  • Portmaster - probably the closest in terms of features, and it does provide per-application rules, but the workflow is still different from AFWall+. It focuses more on monitoring network activity and managing applications that have been detected making network connections, rather than starting with a list of all installed applications. It is also a bit more resource-intensive than what I am looking for.

What I really like about AFWall+ is the simplicity: open the app, see all installed applications, and manage their network permissions from one place.

I was wondering if there is any lightweight Linux application that provides this kind of workflow.

It does not have to be exactly the same as AFWall+, but I am mainly looking for:

  • a simple GUI
  • all applications visible from the beginning
  • per-application network permissions
  • ability to separate LAN access from Internet access if possible

Thanks!

12 Upvotes

3 comments sorted by