Cinderward |

A simple, no-nonsense, init-agnostic, Wayland-friendly GUI for firewalld.

Cinderward, a GUI for firewalld.

Introduction

Cinderward is a simple utility built with MauiKit that provides an intuitive interface for managing day-to-day firewall rules without the complexity of firewalld's command-line tooling.

Cinderward intentionally does not expose advanced or dangerous firewalld features. Its design goal is to remain approachable and safe for everyday users while still being powerful enough for typical workstation and laptop use cases.

Features

• Zone-based control:

  • View and edit firewalld rules per zone
  • Add or remove services, ports (TCP/UDP), and port forwarding rules

• One-click security toggles:

  • Panic Mode (lockdown)
  • Masquerading (NAT)
  • Logging of denied packets
  • ICMP reconnaissance blocking

• Always in sync:

  • Real-time synchronization with firewalld over D-Bus
  • Changes are applied immediately to the active firewall

• Desktop-friendly:

  • Wayland-compatible UI
  • Does not require systemd (init-agnostic; works regardless of init system)

• Built for modern Linux:

  • Implemented with Qt 6, MauiKit, and KF6
  • Optimized for x86-64-v3 CPUs

Requirements

• Nitrux 5.1.0 and newer.

Runtime Requirements

firewalld (>= 2.3.1)
mauikit (>= 4.0.2)
qt6 (>= 6.8.2)
kf6-windowsystem (>= 6.13.0)
kf6-i18n (>= 6.13.0)
kf6-coreaddons (>= 6.13.0)

Usage

To use Cinderward, launch it from the applications menu.

Licensing

The license for this repository and its contents is BSD-3-Clause.

Issues

If you find problems with the contents of this repository, please create an issue and use the 🐞 Bug report template.

Submitting a bug report

Before submitting a bug, you should look at the existing bug reports to verify that no one has reported the bug already.

©2025 Nitrux Latinoamericana S.C.