Iptables Nat

Dwall is an all-purpose firewall tool to generate an iptables firewall out of a simple configuration. It has about 80 predefined services and comes with a simple 3 zone firewall example. In essence the sysadmin only needs to define the different zones and define what traffic is allowed from...

Frankenwall is a bash shell script intended to create a highly secure IPTables based Linux firewall/router with QOS/traffic shaping/bandwidth management. Be certain you know exactly what your network needs before using it. The primary focus of this project is security through an intimate...

NSH is intended to handle configuration for interfaces, bridging, routing, packet filtering, NAT, and ISAKMP. It presents the user with a vaguely cisco-like interface. It also gives the user access to system information and diagnostics. NSH replaces the userland commands which handle these...


Platforms: *nix

KMyFirewall attempts to make it easier to setup IPTables based firewalls on Linux systems. KMyFirewall will be the right tool if you like to have a so called "Personal Firewall" running on your Linux box, but don't have the time and/or the interest to spend hours in front of the IPTables manual...


Platforms: *nix

Alfandega is a strong and Modular IpTables Firewall. It provides NAT, port-forwarding, spoofing list, blacklist of crackers and spywares sites, protection for tcp/udp scans, DOS/DDOS and Smurf attacks, TCP tuning, DHCP and PPP support and much more.


Platforms: *nix

FireHOL is a stateful iptables packet filtering firewall configurator. It is abstracted, extensible, easy and powerful. It can handle any kind of firewall, but most importantly, it gives you the means to configure it, the same way you think of it.


Platforms: *nix

IPMENU is a user interface to Netfilter/iptables and Linux policy routing or traffic control, allowing you to edit firewall rules and configure the firewall to "mark" packets for policy routing or for class based queueing (CBQ). Netfilter is the Linux 2.4 subsystem for configuring a multi-homed...


Platforms: *nix

Perlipq is a Perl extension to Linux iptables userspace queueing via libipq.Packets may be selected from the stack via the iptables QUEUE target and passed to userspace. Perlipq allows these packets to be manipulated in Perl and passed back to the stack. This is version 1.25, released for...


Platforms: *nix

fBuilder Plus is a Web-based utility for building and configuring your iptables/ipchains-based Linux firewall. It performs all actions in real-time and includes a Firewall Creation Wizard, edit, insert, and delete capabilities for firewall rules, rule shifting, support for DHCP clients, DMZ...


Platforms: *nix

PCX Firewall is an IPTables firewalling solution that uses Perl to generate static shell scripts based upon the users configuration settings. This allows the firewall to startup quickly, as it does not have to parse config files every time it starts. Whats New in This Release: - All known...


Platforms: *nix

Uruk is an iptables firewall script that is useful if you need similar packet filtering configurations on multiple machines. It uses a template file for source addresses and network services. Next are the generic installation instructions. The `configure shell script attempts to guess correct...


Platforms: *nix

Pol-IP is a complete traffic control system for a Linux NAT box with multiplataform clients. It has a user-friendly wizard to config the system in which you can add, delete or chage, clients or groups bandwith, in a hierarchical structure. The clients get clean statistics about their actual speed...


Platforms: *nix

Bifrost is a firewall management interface to iptables (iptables GUI). The system is inspired by Checkpoint and Watchguard firewall management. We looked at the way Checkpoint works with source, destination, action and logging. At the same time, we are managing incoming and outgoing traffic in a...


Platforms: *nix

fwsnort parses the rules files included in the snort intrusion detection system and builds an equivalent iptables ruleset for as many rules as possible. fwsnort accepts command line arguments to restrict processing to any particular class of snort rules such as "ddos", "backdoor", or...


Platforms: *nix

patch-o-matic-ng it is a system to apply netfilter-related patches to the latest kernel and/or iptables sources. FOLLOW THESE STEPS: 0) There may be some outstanding bugfixes or tweaks which are not yet in the official kernel. To look through these, do: #...


Platforms: *nix

NATMonitor is an OpenSource (subject to the GPL license) tool to collect realtime statistics about your network hosts' internet usage. NATMonitor sits on your Linux1 based NAT router, running as a daemon, overseeing the traffic on your network interfaces. The traffic detected is categorized...


Platforms: *nix

This patch can be used on a masquerading firewall (NAT) to keep a log of all the outgoing masqueraded TCP connections. Its even possible to log the name of the user who has opened the connection. This can be a useful security tool for many small networks that are hidden by a masquerading box if...


Platforms: *nix

IPKungFu is an iptables-based Linux firewall. The primary design goals are security, ease of use, and performance, in that order. It takes advantage of advanced features of iptables, tcpwrappers, and the Linux kernel. IPKungFu can handle a wide array of configurations, and supports Internet...


Platforms: *nix

iptables accounting monster (iam) is a traffic reporting tool for iptables. Currently it can generate daily reports in plain text and HTML format. It can also create summaries (month or year) of these daily reports. While looking for a traffic reporting tool, I didnt find something that i...


Platforms: *nix

JSTUN project is a java based STUN (Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translation (NAT)) implementation. STUN provides applications a mean to discover the presence and type of firewalls or NATs between them and the public internet. Additionally, in...


Platforms: *nix