Skip to content


Repository files navigation


A Python firewall: Because slow networks are secure networks.


This section assumes that you are installing this program on Ubuntu 14.04 LTS. This firewall should work on other Linux systems, but safety not guaranteed.

First, install the required packages. On Ubuntu, these are iptables, python, python-pip, build-essential, python-dev, and libnetfilter-queue-dev. Next, use pip2 to install the project dependencies, which can be found in requirements.txt.

The commands for both these operations are:

sudo apt-get install python python-pip iptables build-essential python-dev libnetfilter-queue-dev
pip install --user -r requirements.txt


The main file is, which needs to be run as root to modify IPTables. Additionally, main needs to receive a JSON configuration file as its first argument. If running with the example configuration, the command is:

sudo python2 examples/example.json

To stop PyWall, press Control-C.


PyWall should undo its changes to IPTables after exiting. However, if you are unable to access the internet after exiting PyWall, view existing IPTables rules with sudo iptables -nL. If a rule with the target chain NFQueue lingers, delete it with sudo iptables -D INPUT -j NFQUEUE --queue-num [undesired-queue-number].

For INPUT rules, the command is sudo iptables -D INPUT -j NFQUEUE --queue-num 1. For OUTPUT rules, the command is sudo iptables -D OUTPUT -j NFQUEUE --queue-num 2.

In case PyWall gives a message that another application has the xtables lock, Control-C the server, ensure that all the IPTables rules are cleared, and restart PyWall.