Saturday, March 27, 2010

What is new in Firewall Builder 4.0

I put together a page where I discuss most important and interesting additions and changes in Firewall Builder 4.0

This is more detailed than Release Notes but skips some minor changes

Wednesday, March 24, 2010

Firewall Builder 4.0 status update

v4.0 beta is progressing really well. We had a few minor issues but at this time I am not tracking any major problems with it. Please find a time and give it a try, I would like to make sure we find and clear as many problems as possible before the release. That is what beta is for, after all. If things go like they did so far, I hope to make the release mid-April.

We are working on the documentation at this time. Article "Introduction to Firewall Builder 4.0" on the nixCraft blog was rather popular and I am following it with a second one which is going to be a detailed guide that describes building a firewall configuration for the cluster of two web serves (on-the-host firewall, that is). This guide is interesting in that it starts with Linux servers running iptables and heartbeat but then shows how to convert it to OpenBSD running PF and CARP. The second article should be published on nixCraft blog soon.

I am looking for more blogs and professional news sites that would do a review or accept guest posts that I can write. Please send pointers to me if you know of any popular site or blog like that. It would be great if you could do a review or write an article, too. I am offering free license for Firewall Builder 4.0 package for Windows or Mac OS X to those who can write and publish an article or review on their site (or anywhere, for that matter).

In fact, I have a few "specials" where I give a free license in exchange for certain things you could do, please take a look at the purchase page here:

Thank you

Wednesday, March 17, 2010

Introduction to Firewall Builder 4.0

My guest post "Introduction to Firewall Builder 4.0" has been published on nixCraft blog. Thanks Vivek! Read it here:

In this post I go over high level points explaining benefits of Firewall Builder for a system administrator and then look at the new features in Firewall Builder 4.0. This is the first article in a mini-series of two, the second article will demonstrate configuration of a firewall for a cluster of two web servers.

Tuesday, March 9, 2010

Firewall Builder 4.0 Beta

I am pleased to announce availability of Firewall Builder 4.0 Beta. We
have been testing the new version internally and in limited beta
release for several months now and we believe it is ready for public
beta. The new version comes with support for high availability
firewall configurations, including heartbeat, vrrpd, keepalived,
conntrackd on Linux, CARP and pfsync on OpenBSD and PIX failover
configuration. It can generate configuration scripts to manage ip
addresses, VLAN, bridge and bonding interfaces on the firewall.
Drop-in support for OpenWRT firewall script is now available, as well
as experimental integration with IPCOP firewall appliances. The GUI
has supports undo/redo of unlimited depth and was generally
streamlined and improved.

Source tar.gz, binary rpm and deb packages have been uploaded to
SourceForge, in the directory Current_Packages/4.0.0/

Release Notes can be found here:

rpm and deb "testing" repositories now serve fwbuilder 4.0 build 2704 packages.

This page explains how to configure apt and yum to use our

We are working on the Firewall Builder Users Guide 4.0 right now. The
text is still work in progress, but updated Guide is being published
on the we site every night: Both HTML and PDF
versions are available.

Chapters that describe configuration of ip addresses, vlan, bridge and
bonding interfaces are here:

Chapters that describe firewall cluster configurations are here:

Examples of cluster configurations on Linux with vrrpd and heartbeat:

Please give it a try!


Thursday, March 4, 2010

Progress report

Firewall Builder 4.0 is very close to the point where it will be released as public beta. We are doing last minor bug fixes and wating for the "GUI" section of the Users Guide to be rewritten to reflect changes in the GUI. Hopefully we'll start public beta mid-March. Stay tuned!