Iptables Howto

Dwall is an all-purpose firewall tool to generate an iptables firewall out of a simple configuration. It has about 80 predefined services and comes with a simple 3 zone firewall example. In essence the sysadmin only needs to define the different zones and define what traffic is allowed from...

Frankenwall is a bash shell script intended to create a highly secure IPTables based Linux firewall/router with QOS/traffic shaping/bandwidth management. Be certain you know exactly what your network needs before using it. The primary focus of this project is security through an intimate...

KMyFirewall attempts to make it easier to setup IPTables based firewalls on Linux systems. KMyFirewall will be the right tool if you like to have a so called "Personal Firewall" running on your Linux box, but don't have the time and/or the interest to spend hours in front of the IPTables manual...


Platforms: *nix

FireHOL is a stateful iptables packet filtering firewall configurator. It is abstracted, extensible, easy and powerful. It can handle any kind of firewall, but most importantly, it gives you the means to configure it, the same way you think of it.


Platforms: *nix

quicktables is an iptables firewall and firewall / nat (gateway) script generator. it was created to provide a secure set of iptables rules quickly, while still maintaining few requirements (sh and ifconfig pretty much). quicktables will ask you to answer a small handful of questions, and...


Platforms: *nix

Perlipq is a Perl extension to Linux iptables userspace queueing via libipq.Packets may be selected from the stack via the iptables QUEUE target and passed to userspace. Perlipq allows these packets to be manipulated in Perl and passed back to the stack. This is version 1.25, released for...


Platforms: *nix

PCX Firewall is an IPTables firewalling solution that uses Perl to generate static shell scripts based upon the users configuration settings. This allows the firewall to startup quickly, as it does not have to parse config files every time it starts. Whats New in This Release: - All known...


Platforms: *nix

Uruk is an iptables firewall script that is useful if you need similar packet filtering configurations on multiple machines. It uses a template file for source addresses and network services. Next are the generic installation instructions. The `configure shell script attempts to guess correct...


Platforms: *nix

EtherDam is a firewall configuration engine that relies on iptables. It presents firewall configuration as a somewhat simpler scripting language thats still flexible enough for most purposes. So why not just use iptables? Well, lets just face one thing: iptables is a pain to manage. By pain,...


Platforms: *nix

Bifrost is a firewall management interface to iptables (iptables GUI). The system is inspired by Checkpoint and Watchguard firewall management. We looked at the way Checkpoint works with source, destination, action and logging. At the same time, we are managing incoming and outgoing traffic in a...


Platforms: *nix

fwsnort parses the rules files included in the snort intrusion detection system and builds an equivalent iptables ruleset for as many rules as possible. fwsnort accepts command line arguments to restrict processing to any particular class of snort rules such as "ddos", "backdoor", or...


Platforms: *nix

patch-o-matic-ng it is a system to apply netfilter-related patches to the latest kernel and/or iptables sources. FOLLOW THESE STEPS: 0) There may be some outstanding bugfixes or tweaks which are not yet in the official kernel. To look through these, do: #...


Platforms: *nix

ITVal is a decision-diagram based query engine for testing and verifying iptables firewalls. Because firewalls can be very complicated, it is often difficult to know whether your firewall is correctly configured to protect against various attacks. ITVal allows the system administrator to...


Platforms: *nix

IPKungFu is an iptables-based Linux firewall. The primary design goals are security, ease of use, and performance, in that order. It takes advantage of advanced features of iptables, tcpwrappers, and the Linux kernel. IPKungFu can handle a wide array of configurations, and supports Internet...


Platforms: *nix

iptables accounting monster (iam) is a traffic reporting tool for iptables. Currently it can generate daily reports in plain text and HTML format. It can also create summaries (month or year) of these daily reports. While looking for a traffic reporting tool, I didnt find something that i...


Platforms: *nix

dirwall is a small iptables firewall script that keeps the iptables rules separate from the script. The rules are stored in separate files so that other packages may maintain them. The dirwall rules are located in /etc/dirwall/{ACCEPT,FORWARD,MASQ,NAT,NOLOG,REJECT}/*". There may be multiple...


Platforms: *nix

TuxFrw is a set of scripts created to ease the way Linux IPTables rules are configured. Using TuxFrw an user can configure his own Linux / Netfilter based network firewall, simply passing some IP address numbers and other services utilization policie


Platforms: *nix

YAFT project is a frontend for iptables in the new linux 2.4.x kernels. Its purpose is to provide a more structured interface to the iptables firewalling system making it simpler for the firewall manager to add and remove rules. (And yes, it has man pages) Whats New in This Release: - This is...


Platforms: *nix

myfw is firewall based on iptables snipets (modules). myfw project helps you to build your iptables firewall. A configuration is listing ``modules, which are containing iptables rules. Thoses modules can contain perl code, in order to facilitate writing of rules (think foreach @ntp_servers)....


Platforms: *nix

AGT Firewall is a powerful console frontend to iptables, supporting nearly all of the iptables extensions. All options can be specified in a configuration file with similar syntax to 'ipf' and 'ipfw'. Requirements: - iptables


Platforms: *nix, C/C++, BSD