Firewall Builder

Shareware; $79.00

Current Version: 2.1.19 (May 20, 2008) / 3.0.1 (October 6, 2008)

Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF and Cisco PIX.

Being truly vendor-neutral, Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path.

Version 3.0.0 added/changed the following:

• Firewall Builder 3.0 introduces support for IPv6 for iptables and PF firewalls and Cisco IOS extended access lists. Now you can generate both IPv4 and IPv6 policies for firewalls and access lists for routers using the same GUI and the same database of objects that represent network addresses and services.
• In this version, firewall object can have any number of policy and NAT rule sets which can be used for branching rules or to generate user-defined chains (iptables) or anchors (pf) that can be used by external scripts.
• In addition to that, the GUI has been improved with addition of the ability to group rules in policies, control size of icons and fonts.

Version 3.0.1 introduces a huge number of additional bugfixes, which are detailed in the online release notes.

The download packages work in evaluation mode for 30 days and can be unlocked with a license file. Please note: Mac OS X packages are built on Intel-based Mac running Leopard. The author has been having difficulties building universal packages with QT so these will not work on PowerPC Macs, so the old PowerPC version (2.1.19) remains available.