Zones
Group network interfaces and addresses into zones such as localhost, a trusted local network and the Internet.
Screenshots · Generic Interface
Rules by zone, host and service.
The Generic Interface is an abstract view of what kind of network traffic may or may not pass your computer. Rules are generated by a compiler plugin, so other backends are possible in principle.
How the model is organized
This is a conceptual map of the Generic Interface, not a screenshot.
Hosts and services
Name special hosts and services. You do not need to remember port numbers to build a rule.
Rules and inheritance
Define what may pass between zones. Rule inheritance can be enabled or disabled for nested zones.
Compiler plugin
A compiler turns the abstract model into a firewall script. The current release implements the iptables compiler.
What you can do
- Build zone and host based rules.
- Add NAT and simple network router support.
- Mark special hosts as trusted or banned.
- Enable or disable rule inheritance for nested network zones.
- Export the ruleset to the IPTables Interface and preview it there.
Good to know
The Generic Interface is operating system and backend independent in design. Currently only Linux and iptables are implemented, with OpenBSD support planned.
The project archive does not contain a usable Generic Interface screenshot. The description here follows the handbook, and the IPTables Interface screenshot shows the other editor.
Further reading: Features and Using KMyFirewall. Background: OpenBSD, IPTables and KDE.