Home

Apotropaios - Firewall Manager

Unified, security-focused firewall management for Linux

Welcome to the Apotrópaios wiki. Apotropaios is a zero-dependency bash framework for managing firewall rules across multiple backends and Linux distributions through a single consistent interface.

What is Apotropaios?

Apotropaios (from Greek ἀποτρόπαιος — "turning away evil") provides unified management of firewall rules across firewalld, ipset, iptables, nftables, and ufw. It supports Ubuntu, Kali Linux, Debian 12, Rocky Linux 9, AlmaLinux 9, and Arch Linux.

Key Capabilities

• Unified Interface — One tool to manage rules across five firewall backends
• Rule Lifecycle — UUID-tracked rules with create, activate, deactivate, remove, and automatic TTL expiry
• Configuration Portability — Import/export rule sets with integrity verification
• Backup & Recovery — Automatic restore points, timestamped archives, immutable snapshots
• Security-First — Whitelist input validation, shell injection protection, sensitive data masking, advisory locking
• Interactive & CLI — Full menu system with guided wizards plus complete CLI for automation
• Zero Dependencies — Pure bash 4.0+, no external packages beyond core system utilities

Quick Navigation

Page	Description
Quick Start Guide	Get running in 5 minutes
Usage Guide	Complete usage reference
Architecture and Design	System design with diagrams
Configuration References	All configuration options
Operational Scenarios	Real-world usage examples
Troubleshooting Guide	Common issues and solutions
FAQ	Frequently asked questions
Security Policy	Security model and reporting
Developer Guide	Code component catalog
Development Guide	Contributing to the project
Contributing	How to contribute
Changelog	Version history

Current Version

v1.1.10 — See the Changelog for details.