PeerGuardian is a privacy oriented firewall application. It blocks connections
to and from hosts specified in huge blocklists (thousands or millions of IP
ranges). Its origins lie in targeting aggressive IPs while you use P2P.
pgl is based on the Linux kernel netfilter framework and iptables. It provides:
* The pgl daemon pgld. It uses the netfilter xt_NFQUEUE kernel module
(available since kernel 2.6.13).
* The pgl command line interface pglcmd. It provides easy ways to
interact with the pgl daemon and does all common related tasks.
* The pgl Graphical User Interface pglgui (Qt4).
- Start and stop pgld. Or let init do this automatically.
- Update your blocklists from online sources. Or let cron do this
automatically. Backups will be used if a problem occurs. Additionally you
may use your local blocklists.
- Remove lines by keyword from the blocklists.
- Handle your iptables rules: use a default setup, easily allow all traffic on
specific ports and use an allow list, or add your own sophisticated iptables
- Automatically make sure the LAN and the DNS server aren't blocked. If you
are on a public LAN, you probably want to disable this feature.
- Check the status and test pgl.
- Detects if kernel modules are needed and loads them if necessary.
- Set verbosity and logging options.
- Provides LSB 3.1 compatible init script.
- Daily rotation of the logfiles.