Turn Linux into a firewall.

An open source firewall appliance based on Debian 13, managed entirely from a web UI. Stateful filtering, NAT, routing, VPN, high availability and more, all native in the core. The capabilities of pfSense, OPNsense or FortiGate, free, on any hardware Linux runs on.

Install the ISO View on GitHub

GPL-3.0, no subscription
Native on Debian 13
No CLI required

Write the installer ISO to a USB key or a VM, boot it, and pick your keyboard and LAN IP. Already on Debian 13? Install the package instead.

Free and open source

GPL-3.0. No edition, no paywall, no subscription.

Runs on your hardware

Built on Debian Linux: mini-PCs, servers, VMs and modern NICs.

One web UI

Stage, Apply, kernel push, auto-rollback. No CLI required.

Native, tested core

Every service integrated and tested together, upgraded as one.

The web UI

Every page follows the same pattern: stage in DB, click Apply, kernel push happens. Auto-rollback if the new ruleset breaks reachability.

https://muros.lan/

MurOS dashboard: live system and traffic counters, with the navigation menu on the left

The MurOS dashboard: live system and traffic counters, with every feature one click away in the left-hand menu.

Feature comparison

What MurOS does compared to the incumbents, focused on the core network features most companies actually run.

Capability	FortiGate	pfSense	OPNsense	MurOS
Stateful firewall (nft)	yes	yes	yes	yes
NAT (SNAT / DNAT)	yes	yes	yes	yes
IPsec site-to-site	yes	yes	yes	yes
WireGuard	recent	yes	yes	yes
HA (VRRP active/passive)	yes	yes	yes	yes
Multi-WAN failover	yes	yes	yes	yes
DHCP + recursive DNS	yes	yes	yes	yes
IDS / IPS (Suricata)	yes	package	yes	planned
External auth (LDAP / RADIUS)	yes	yes	yes	planned

Where MurOS says planned, it means native in the core, not a third-party plugin. See what it is for and what is on the roadmap.