Iptables Howto

Easy Firewall Generator is a Web application that generates an iptables firewall script designed either for a single system connected to the Internet or for a system acting as a gateway/firewall for a small private network. The generator prompts recursively for various options; when the selected...

HardWall Firewall: Is an iptables script that does the following:- Port Forwarding, Packet Filtering, Statefull Packet Inspection, Port Redirection, Masqurade, SNAT, DNAT, NAT & Bridging - Functions as both a Workstation and IP Forwarding Firewall

Kharon Firewall is a shell script based on Iptables and written for Linux 2.4.x and 2.6.x.It can be used for a personnal or a professionnal usage and fully commented on in french.


Platforms: *nix

IPAC-NG is the iptables/ipchains based IP accounting package for Linux. It collects, summarizes, and nicely displays IP accounting data. Its output can be a simple ASCII table, or graph images. Ipchains and iptables are supported. Logs are stored in files, gdbm, or PostgreSQL database.


Platforms: *nix

links2world Firewall is a very simple tool writen in C, that helps you generate iptables rules for Linux 2.4.x and newer kernels. Released under GNU General Public License, it is very easy to configure and designed to run on hosts with one or more network interfaces. Most of the existing...


Platforms: *nix

IPAC-NG is the iptables/ipchains based IP accounting package for Linux. It collects, summarizes, and nicely displays IP accounting data. Its output can be a simple ASCII table, or graph images. Ipchains and iptables are supported. Logs are stored in files, gdbm, or PostgreSQL database. ipac...


Platforms: *nix

Fair NAT is a script for configuring NAT on dedicated Linux routers. This is the home of my linux router shaper script which allows something like fair bandwidth sharing among clients in the local network. The script is not great or anything - please dont expect the holy grail here - I just...


Platforms: *nix

dbxbandmin collects traffic via ipchains/iptables/ipfwadm-rules and writes the data into an Interbase database. It uses Perls DBI-driver and can be extended with support for various database versions. - You need a kernel with firewall-support - you need ipfwadm or ipchains or iptables - you...


Platforms: *nix

Alfandega is a strong and Modular IpTables Firewall. It provides NAT, port-forwarding, spoofing list, blacklist of crackers and spywares sites, protection for tcp/udp scans, DOS/DDOS and Smurf attacks, TCP tuning, DHCP and PPP support and much more.


Platforms: *nix

IPMENU is a user interface to Netfilter/iptables and Linux policy routing or traffic control, allowing you to edit firewall rules and configure the firewall to "mark" packets for policy routing or for class based queueing (CBQ). Netfilter is the Linux 2.4 subsystem for configuring a multi-homed...


Platforms: *nix

My Own Dialup Utils is a Linux-oriented textual dialup toolkit with support for MS callback and iptables. It is intended to be flexible enough to dialup to many ISPs without much configuration. Whats New in This Release: - This release features new documentation and howtos, a fix for MS RAS...


Platforms: *nix

PHP Firewall Generator is a simple PHP script that generates a firewall for iptables or ipchains.The script is created based on configuration rules entered by the user. The aim is to support a rule set similar to those supported by commercial Firewall systems, and have it easy to configure.Basic...


Platforms: Windows, Mac, *nix, PHP, BSD Solaris

NetSplitter is a ( user-level ) network load-balance. It is like a transparent-proxy and will balance ( output ) TCP connections on multiples links. Linux NAT add/remove code is incomplete. NetSplitter will use the system() function to run the iptables to handle this. Step 1) IPTABLES Tell...


Platforms: *nix

Firewall Monitor allows you to monitor ipchains/iptables output in realtime. It supports both logging to a file/stdout and/or to tcpdump format capture logs. It also supports security features such as running non-root, and chrooting itself. Fwmon can easily be integrated into an existing...


Platforms: *nix

sshdfilter automatically blocks ssh brute force attacks by reading sshd log output in real time and adding iptables rules based on authentication failures. Block rules are created by logging on with an invalid user name, or wrongly guessing the password for an existing account. Block rules...


Platforms: *nix

ulogd is a replacement for traditional syslog-based logging (using the LOG target) in iptables-based firewalls. ULOG/ulogd has a different concept. Packets get copied to a special logging daemon, which can do very detailed logging to different targets (plaintext files, MySQL databases, ...)....


Platforms: *nix

fwLOGview is a graphical, real-time, colorized log viewer for Linux netfilter/iptables, Cisco Pix, *BSD ipfilter, Fortigate, and other logs. fwLOGview displays the log entries in colors related to the firewall action. You can hide unimportant columns, change the order in which columns are...


Platforms: *nix

fBuilder project is a web-based utility for building and configuring your iptables or ipchains based Linux firewall. Written by the author of fwconfig, our fBuilder product line brings you many new and exciting features that will fit your firewall creation needs. InnerTek Software currently...


Platforms: *nix

ipt_ACCOUNT is a high performance local network accounting system written for the Linux netfilter/iptables system. It has just two parameters: addr is the subnet which is accounted for tname is the table name where the information is stored The data can be queried later using the...


Platforms: *nix

ipset pakcage is a framework inside the Linux 2.4.x and 2.6.x kernel, which can be administered by the ipset utility. Depending on the type, currently an IP set may store IP addresses, (TCP/UDP) port numbers or IP addresses with MAC addresses in a way, which ensures lightning speed when...


Platforms: *nix