Firewall with (web) GUI ?

[lukasMega]

Is there any good firewall with simple management, configuration and statistics over web UI ?

• I would like to have something similar to PiHole with possibility to block all requests to my server when the request's IP is in some database (for example some geo-block DB)
• I would like to see from which countries are requests coming (and blocked) to my server.

Currently I'm using ufw, fail2ban and webmin

//update:
something like such dasboard:

• but linked article in French is already 2 years old (it may be outdated) and I'm not sure if it's still working
• I'd rather avoid setting up Grafana, Telegraf, InfluxDB, a GeoIP database, etc.

[MichaIng]

webmin generally seems like a viable solution for this. But as it is a complete admin tool, it implicitly weakens security as well, when being hacked. Of course this is true as well for a firewall with web UI: you need to open that port, and if someone hacks that web interface, the firewall is for the bin. But at least, compared to webmin, it does not grant the attacker full admin access to everything else.

Quick check, I sadly could only find long abandoned projects with low reputation, or complete admin interfaces like webmin: https://askubuntu.com/questions/949661/web-interface-for-firewall

... not sure whether CSF is a thing? It was a builtin web interface at least:

• https://configserver.com/configserver-security-and-firewall/
• https://tecadmin.net/install-csf-firewall-on-linux/
• https://tecadmin.net/how-to-enable-csf-firewall-web-ui/

It does package inspection, which is IMO an anti-feature, generally it seems to do too much for my taste. I would prefer a web UI frontend to bare iptables/nftables, or ufw at best 🤔.

[lukasMega]

Thank you for reaching out! I noticed that I was also on the same Ask Ubuntu question.

Currently I'm using webmin behind proxy (Caddy) and in webmin I configured 2FA so I feel a bit safer when I need login not only with my password but also with TOTP.
I was just looking for a modern web interface to monitor and configure firewalls on Linux.