Firewall Config Builder

This writes a structured config file for your own compiler/backend — not raw iptables or nft syntax.

Basic network

NAT

Example: 192.168.50.0/24

hostapd

IPsec / VPN

Port forwarding

Format suggestion: tcp:8080:10.10.10.2:80 — one per line

Remote syslog

Safety and extras

Generated Config Preview

# Taransvar Firewall Config
internal_ip=192.168.50.1
admin_source=0.0.0.0/0
allow_ssh=1
allow_dhcp=1
forward_enabled=1
nat_enabled=0
nat_range=192.168.50.0/24
dns_enabled=1
dns_servers=1.1.1.1,8.8.8.8
hostapd_enabled=0
hostapd_ssid=TaransvarWiFi
hostapd_interface=wlan0
vpn_enabled=0
vpn_peer_name=partner1
vpn_local_id=81.88.19.252
vpn_remote_id=partner1
vpn_psk=change-me
vpn_remote_nets=10.47.1.0/24
honeypot_forward_enabled=0
honeypot_wan_port=2222
honeypot_lan_ip=10.10.10.11
honeypot_lan_port=22
server_forward_enabled=0
server_forward_rules=tcp:8080:10.10.10.2:80
remote_syslog_in=0
remote_syslog_out=0
remote_syslog_server=10.10.10.10
remote_syslog_port=514
rollback_enabled=1
rollback_seconds=90
notes=

Generated Setup File for Connected Units

# Connected unit setup
INTERNAL_IP=192.168.50.1
DEFAULT_GATEWAY=192.168.50.1
DNS_SERVERS=1.1.1.1,8.8.8.8