Stateful Packet Filter

DNS Blacklist Packet Filter project is a Linux netfilter client that decides whether to accept or drop packets based on the results of a DNS blacklist query (such as MAPS, SORBS, or SPEWS, to name a few). One use is to filter all incoming SMTP SYN packets for spam filtering..

The fairly fast packet filter (FFPF) is an approach to network packet processing that adds many new features to existing filtering solutions like BPF. fairly fast packet filter is designed for high speed by pushing computationally intensive tasks to the kernel or even network processors and by...

ip-filter-cgi is a set of perl script to modify rules of IP Filter (IP Filter is a TCP/IP packet filter cf: http://coombs.anu.edu.au/~avalon/ip-filter.html). If you make any improvement, correction send it back to. The scripts is not complete and is provided for testing purpose....


Platforms: *nix

nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC. HiPAC is a novel framework for packet classification which uses an advanced algorithm to reduce the number of memory lookups per packet. nf-hipac package is ideal for environments involving...


Platforms: *nix

NetworkShield Firewall is fully compatible with Microsoft supported operating systems, and it has several security features specifically designed for small and medium sized businesses. It allows to control and protect local networks against attacks and internal threats, keep corporate information...


Platforms: Windows

HardWall Firewall is an iptables firewall script that provides port forwarding, packet filtering, stateful packet inspection, port redirection, masquerading, SNAT, DNAT, NAT, and bridging. HardWall Firewall functions as both a workstation firewall and an IP forwarding firewall. Whats New in...


Platforms: *nix

OpenBSD Live-CD Firewall is an OpenBSD-based pf (packet filter) firewall, with DNS, squid, NAT, and a DHCP server (dnsmasq) for internal clients preconfigured. Settings and log files can be saved to a USB device. Saved settings will be restored at the next reboot. Additional security related...


Platforms: *nix

pflogx is a simple tool that exports OpenBSD packet filter logs to XML files. pflogx reads a binary log file generated by the pf logging daemon (pflogd) and generates a human-readable and exploitable XML file. Using an XSLT processor you can convert this XML file to any other format, such as...


Platforms: *nix

fwlogwatch is a packet filter / firewall / IDS log analyzer written by Boris Wesslowski originally for RUS-CERT. fwlogwatch supports a lot of log formats and has many analysis options. It also features incident report and realtime response capabilities, an interactive web interface and...


Platforms: *nix

IPFIRE-wall is an IPv4 Packet Filter with Network Address Translation capabilities. It can be used in desktop systems and in simple network configurations, providing a friendly interface and a simple installation. Also unprivileged users can personalize. Whats New in This Release: Kernel:...


Platforms: *nix

Userfriendly Iptables Frontend provides a tool for generating optimized packet filter rules. The Userfriendly Iptables Frontend is used to generate optimized iptables packet filter rules, using a simple description file specified by the user. Generated rules are provided in iptables- save...


Platforms: *nix

Frickin PPTP Proxy is a fast PPTP proxy for any BSD system with the OpenBSD packet filter installed. It handles bi-directional tunnels transparently and can be chained from one proxy to another over several servers. Whats New in This Release: - This release fixes an endian issue with echo...


Platforms: *nix

LFT (Layer Four Traceroute) is a sort of "traceroute" that often works much faster than the commonly-used Van Jacobson method and goes through many configurations of packet-filter based firewalls. More importantly, LFT implements numerous other features, including AS number lookups through...


Platforms: *nix

Kerio WinRoute Firewall 5 (KWF) is a corporate firewall with antivirus support, content filtering and user-specific Internet access management. KWF plug-ins support embedded McAfee Anti-Virus or external AVG, NOD32, eTrust InoculateIT or Sophos virus scanning products. KWF features a keyword...


Platforms: Windows

Kerio WinRoute Firewall 5 (KWF) is a corporate firewall with integrated antivirus, content filtering and user-specific Internet access management. KWF plug-ins support embedded McAfee Anti-Virus or external AVG, NOD32, eTrust InoculateIT or Sophos virus scanning products. KWF features a keyword...


Platforms: Windows

iN@tControl is a packet filter tool for TCP/IP Connections in a network. The client/server technology allows you to manage computers and their port filtering from the connection server computer. You can set specific filter rules and align them to individual computers. Can be used for - network...


Platforms: Windows

libnetfilter_queue is a userspace library providing an API to packets that have been queued by the kernel packet filter. libnetfilter_queue library is is part of a system that deprecates the old ip_queue / libipq mechanism. libnetfilter_queue has been previously known as libnfnetlink_queue..


Platforms: *nix

macf is a MAC-based packet filter. It can be on a machine acting as a firewall, router, bridge, or even a server, and allows operators to 'check out' MACs which may then be used for a period of time. Right now, it's on hold for lack of interest.


Platforms: Mac, BSD, Linux

Server load-balancing software for the OpenBSD PF packet filter


Platforms: Mac, BSD, Linux

Packet Sniffer SDK is a library set for packet capture and network analysis for all Win32 platforms. The main features of the Packet Sniffer SDK library are: Any pre-installed packet drivers are not required; Support of multi-Gigabit networks; Support of all modern development...


Platforms: Windows