Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

At the time that we are using Windows Server, Kerio Winroute Firewall strikes the best.

  1. Powerful Firewall.
  2. Load Balancing and Fail over Features.
  3. Bandwidth Limiter, limit to each host.

The question is, Are there any Linux Equivalent of Kerio WinRoute Firewall?


share|improve this question
1 – Brad Gilbert Jun 23 '09 at 0:59
up vote 1 down vote accepted

As already mentioned, each and every Linux or *BSD distro has a built-in firewall. However, there are number of distributions that have enhanced firewall and routing capabilities, as well as a GUI to simplify administration.

1) If you a looking mostly for firewall and routing features I guess pfSense is a number one choice. You may also take a look at linux based IPCop, both being open source and free . Another one, boasting to be a Cisco router replacement is Vyatta, paid subscription as well as community edition are available.

2) In case you need more advanced solution, more like a UTM device, you can have a look at Untangle (mostly free, but some features are paid) or Astaro, which is a paid solution, but reportedly is able to block encrypted tunnels that users employ to bypass firewalls. Untangle can work both in router or bridge mode. The latter does not require you to change your current network configuration. While being quite resource intensive it has a really admin friendly GUI.

share|improve this answer
IP cop does not have load balancing, but otherwise is ok. – Taras Chuhay Jun 23 '09 at 12:47

We used ClarkConnect for many years as our gateway before finally just moving to a hardware solution. But I think it will suite most of your needs.

ClarkConnect supports multiple WAN links with failover, but not in the community edition. We used the paid versions though and the feature worked pretty good.

Other distro's you may want to look at is IPCop, Endian, PFsense which someone already mentioned but it's based on Monowall which is BSD based but I've heard good things about it as well. I'm not sure if these support auto failover though.

share|improve this answer
+1 for pfsense ! – Antoine Benkemoun Jun 23 '09 at 10:54

I came across this Linux distro called Untangle.

I've never used it. So I'm not sure if it has per-host bandwidth control.

Failover is a paid option. If you don't want to pay, maybe it's possible one can hack failover on top of it.

If you end up using it, don't forget to write a review for us.

Edit: ClarkConnect is another interesting firewall/gateway distro.

share|improve this answer

Just to clarify : Linux kernel includes the firewall functionality. Any Linux distro can be a powerful firewall. The basic tool for controlling it is iptables from the command line. However there are various GUI to manage it, too, like Firestarter, or integrated to Web UIs like webmin or open ebox.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.