A professional security skill for configuring robust firewall rules across diverse server environments and cloud providers.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install my-firewall-v2
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install my-firewall-v2 using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Firewall?
The Firewall skill for Openclaw Skills provides a standardized framework for implementing security best practices across Linux, macOS, and Windows environments. It bridges the gap between OS-level filtering and cloud provider security groups, ensuring that your infrastructure remains inaccessible to attackers while maintaining reliable remote management paths.
By utilizing this skill, developers can automate the deployment of defense-in-depth strategies. It emphasizes a default-deny posture, properly handling the nuances of IPv4/IPv6 parity and the specific challenges posed by Docker networking, which often bypasses traditional system-level rules.
Firewall Use Cases
- Securing cloud instances on providers like Hetzner, DigitalOcean, and AWS.
- Implementing IP-restricted SSH access to mitigate brute-force attacks.
- Configuring secure web server environments for HTTP and HTTPS traffic.
- Managing complex networking requirements for VPNs, mail servers, and monitoring agents.
- Troubleshooting connectivity issues and verifying port visibility from external networks.
How Firewall Works
- The skill assesses the target environment to identify the operating system and cloud provider.
- It establishes a secure access baseline, ensuring SSH or remote management ports are whitelisted before any blocking occurs.
- A default-deny policy is applied to all incoming traffic to minimize the attack surface.
- Specific ports are incrementally opened based on the required services (e.g., 80 for HTTP, 443 for HTTPS).
- The skill synchronizes rules between the OS firewall (like UFW or iptables) and the provider's network-level firewall.
- Verification steps are performed to ensure both IPv4 and IPv6 traffic are correctly filtered.
Firewall Setup
To deploy this security configuration via Openclaw Skills, ensure your environment is prepared for the specific OS you are managing.
# Initialize the security audit
clawdbot run firewall --check-status
# Apply the default-deny stance with SSH protection
clawdbot run firewall --allow-ssh --restrict-ip your_admin_ip
# Sync configuration with provider-level API (if applicable)
clawdbot run firewall --sync-provider aws
Firewall Data Schema & Taxonomy
The Firewall skill maintains a structured approach to rule management and metadata:
| Feature | Specification |
|---|---|
| Default Policy | Deny All Inbound / Allow All Outbound |
| Protocol Support | TCP, UDP, ICMP |
| IP Versioning | Dual-stack (IPv4 CIDR and IPv6) |
| Metadata Tags | OS, Provider, Service Name, Risk Level |
| Logs | Blocked connection attempts and rule change history |
Firewall Advanced Features
- Docker-Aware Filtering: Automatically manages container port bindings to prevent accidental exposure.
- Multi-Provider Sync: Apply consistent rule sets across heterogeneous cloud environments.
- Automated IP Rotation: Update SSH whitelists automatically when your management IP changes.
- Stateful Inspection: Ensures outbound responses are automatically permitted without manual return rules.
- Service-Specific Templates: Pre-configured rules for WireGuard, OpenVPN, and Let's Encrypt challenges.
SKILL.md
Loading
Related Openclaw Skills
Product Strategy Analyst
A professional AI analyst providing opinionated, framework-driven product strategy and market assessment for consumer products.
Etsy Listing Optimizer
An automated SEO tool that leverages AI and real-time data to optimize Etsy titles, tags, and descriptions for maximum search visibility.
Academic Paper Finder
An automated biomedical literature research tool that syncs PubMed data directly to Zotero and EndNote.
A-Share Market Sentiment Quantifier
A data-driven analysis tool that quantifies A-share market cycles into four distinct phases to guide position management and trading strategy.
Ultrahuman Analytics
A comprehensive analytics engine for Ultrahuman users to track health trends and generate detailed bio-data reports via AI.
AI Agent Builder
A comprehensive framework for creating, managing, and deploying specialized AI agents with integrated tools and memory systems.
Featured*
