iptables rules script and firewall configuration file for Whonix-Gateway and Whonix-Workstation.

Whonix-Gateway Firewall Features:

• transparent proxying
• stream isolation
• reject invalid packages
• fail closed mechanism
• optional VPN-Firewall
• optional isolating proxy
• optional incoming flash proxy
• optional Tor relay

Do not remove, unless you no longer wish to use Whonix.

1. Download the APT Signing Key.

wget https://www.whonix.org/keys/derivative.asc

Users can check the Signing Key for better security.

2. Add the APT Signing Key.

sudo cp ~/derivative.asc /usr/share/keyrings/derivative.asc

3. Add the derivative repository.

echo "deb [signed-by=/usr/share/keyrings/derivative.asc] https://deb.whonix.org bookworm main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list

4. Update your package lists.

sudo apt-get update

5. Install whonix-firewall.

sudo apt-get install whonix-firewall

Can be build using standard Debian package build tools such as:

dpkg-buildpackage -b

See instructions.

NOTE: Replace generic-package with the actual name of this package whonix-firewall.

• A) easy, OR
• B) including verifying software signatures

• Free Forum Support
• Premium Support

whonix-firewall requires donations to stay alive!