FOOMUURI(8)

🎀 FOOMUURI(8) — multizone bidirectional nftables firewall, but make it bestie 🎀

okay so bestie, you opened the foomuuri(8) page and I’m lowkey obsessed — this is the User Manual for foomuuri, section 8, and yes, FOOMUURI(8) is folded in right at the top like a little bow 🎀. ngl, she’s highkey iconic.

🌸 NAME 🌸

foomuuri — multizone bidirectional nftables firewall. periodt. 🔥

✨ SYNOPSIS ✨

foomuuri [OPTIONS] COMMAND

🦋 DESCRIPTION 🦋

Foomuuri is a firewall generator for nftables based on the concept of zones. It’s giving zone-based excellence, no cap. It is suitable for all systems from personal machines to corporate firewalls, and supports advanced features such as a rich rule language, IPv4/IPv6 rule splitting, dynamic DNS lookups, a D-Bus API and firewalld emulation for NetworkManager’s zone support. the way that it does all of that?? literally unreal 💅

👑 OPTIONS 👑

Here’s the flag buffet — not me making a whole bullet for every single one, but here we are, fr fr. highkey useful:

• --help — print help and exit. bye bestie 👋
• --version — print version information and exit. iconic
• --verbose — verbose output. talkative era
• --quiet — be quiet. 🤫 shhh
• --force — force some operations, don’t check anything. she said what she said 💀
• --soft — don’t force operations, check more. gentle mode
• --fork — fork as a background daemon process. background main character energy
• --syslog — enable syslog logging. log it
• --set=OPTION=VALUE — set foomuuri{} config OPTION to VALUE. customize slay

💖 COMMANDS 💖

all the commands, bestie — full menu:

• start — load configuration files, generate new ruleset and load it to kernel.
• stop — remove ruleset from kernel.
• reload — same as start, followed by iplist refresh. refresh combo
• try-reload — same as reload, ask confirmation to keep new config. Revert back to old config if no reply.
• status — show current status: running, zone-interface mapping.
• check — load configuration files and verify syntax. vibe check
• block — load “block all traffic” ruleset to kernel. blocked era
• ruleset list [ZONE-ZONE]... — list active ruleset currently loaded to kernel. Include whole ruleset or only specified ZONE-ZONE.
• macro list [NAME | VALUE]... — list all macros or macros with specified NAME(s) or VALUE(s). macro magic
• counter list [COUNTER]... — list all or specified named COUNTER(s). numbers bestie
• counter reset [COUNTER]... — reset all or specified named COUNTER(s) values. fresh start
• iplist status [IPLIST]... — list number of entries of all or specified IPLIST(s). count check
• iplist list [IPLIST]... [IPADDRESS]... — list entries of all or specified IPLIST(s) containing IPADDRESS(es). peek the list
• iplist add IPLIST [TIMEOUT] IPADDRESS [IPADDRESS]... — add or refresh IPADDRESS(es) to IPLIST. TIMEOUT format is the same as in iplist{} section, for example 4h. add and refresh realness
• iplist del IPLIST IPADDRESS [IPADDRESS]... — delete IPADDRESS(es) from IPLIST. remove bestie
• iplist flush [IPLIST]... — delete all added IP addresses from all or specified IPLIST(s). flush it
• iplist refresh [IPLIST]... — refresh all or specified IPLIST(s) now. With the --soft option, the refresh interval is checked before fetching new values from the URL or DNS. soft refresh check
• set interface INTERFACE zone {ZONE | -} — change INTERFACE to ZONE, or remove from all zones. zone assignment slay

🍓 FILES 🍓

Foomuuri reads configuration files from /etc/foomuuri/*.conf. See https://foomuuri.foobar.fi/latest/example/host-firewall/ for example configuration. iykyk 🫶

🌈 AUTHORS 🌈

• Kim B. Heino, b@bbbs.net, Foobar Oy. iconic author 💜

🧚 BUG REPORTS 🧚

Submit bug reports https://github.com/FoobarOy/foomuuri/issues. please and thank you 🫶

⭐ SEE ALSO ⭐

Full documentation https://foomuuri.foobar.fi/latest/. go read the docs bestie

---

okay that’s the whole page, bestie — no cap, every flag and command is here 🫶. This iconic manual is from Foomuuri 0.34, dated Oct 16, 2026. mwah, you ate that — go slay your firewall 💋✨