Linux Netfilter

This is a KDE-based wizard aimed at making the process of setting up a linux netfilter firewall easy, especially on distributions with no firewall tool of their own, such as slackware. It creates a shell script, suitable for caling from an init script, or on slackware, being saved as...

The Port Scan Attack Detector (psad) is a collection of three system daemons that are designed to work with the Linux Netfilter firewalling code to detect port scans and other suspect traffic. Port Scan Attack Detector project features a set of highly configurable danger thresholds (with...

specter is a user-space logging facility for the Linux netfilter system. It uses netfilters ULOG target to gather packets, and passes them to attached plugins. Its features a flexible and robust modularized structure, and is based on ulogd, but has improved design and wider functionality. It...


Platforms: *nix

DNS Blacklist Packet Filter project is a Linux netfilter client that decides whether to accept or drop packets based on the results of a DNS blacklist query (such as MAPS, SORBS, or SPEWS, to name a few). One use is to filter all incoming SMTP SYN packets for spam filtering..


Platforms: *nix

pdumpq provides a pcap Dump for Linux/Netfilter QUEUE. pdumpq can be used to take queued packets from netfilter/iptables and dump them to a file that decoders like tcpdump, ethereal, and snort can read. You can also just pipe it through to the packet decoder and see what is in those packets...


Platforms: *nix

fwLOGview is a graphical, real-time, colorized log viewer for Linux netfilter/iptables, Cisco Pix, *BSD ipfilter, Fortigate, and other logs. fwLOGview displays the log entries in colors related to the firewall action. You can hide unimportant columns, change the order in which columns are...


Platforms: *nix

Brcontrol is a set of patches to allow some interaction between a IDS and a firewall (currently snort and linux netfilter). It will help in the creation of aggresive honeypots or other advanced firewall and ids configurations. In can also work as bridge.. Get Brcontrol at SourceForge.net. Fast,...


Platforms: *nix

ipt_ACCOUNT is a high performance local network accounting system written for the Linux netfilter/iptables system. It has just two parameters: addr is the subnet which is accounted for tname is the table name where the information is stored The data can be queried later using the...


Platforms: *nix

TuxFrw is a set of scripts created to ease the way Linux IPTables rules are configured. Using TuxFrw an user can configure his own Linux / Netfilter based network firewall, simply passing some IP address numbers and other services utilization policie


Platforms: *nix

nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC. HiPAC is a novel framework for packet classification which uses an advanced algorithm to reduce the number of memory lookups per packet. nf-hipac package is ideal for environments involving...


Platforms: *nix

dnsreflector daemon listens for DNS queries on a local UDP port and answers with records pointing back to localhost. Combined with OpenBSDs packet filter pf(4) this works as a bandwidth efficient spamtrap. dnsreflector was written and tested with OpenBSD. If you are interested in running...


Platforms: *nix

Webfwlog is a flexible web-based firewall log analyzer and reporting tool. Webfwlog supports standard system logs for linux, FreeBSD, NetBSD, Solaris, Irix, OpenBSD, OS X, etc. as well as Windows XP. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP. Webfwlog...


Platforms: *nix

POP3 Virus Scanner Proxy is a full-transparent proxy daemon which scans all mails for viruses using third party scanners (built-in support for AVPD and Trophie). You have to set up a port redirection in the linux-netfilter (iptables) so that all connections from e.g. inside your office to any...


Platforms: *nix

seppl is both a protocol definition and a software implementation of a new encryption layer for IPv4. seppl project makes use of symmetric cryptography for encrypting the whole traffic on a network. Its implementation is designed around Linux netfilter/iptables. seppl introduces two new...


Platforms: *nix

Yafig is a LAMP-based firewall rule generator. Yafig is a LAMP-based firewall rule generator that creates shell scriptsfor use with Linux netfilter/iptables..


Platforms: *nix

Layer-7 Packet Classifier for Linux is a classifier for the Linux kernels Netfilter subsystem that identifies packets based on application layer data (OSI layer 7). This means that it can classify packets as HTTP, FTP, Gnucleus, eDonkey2000, etc, regardless of port. Our classifier complements...


Platforms: *nix

iptables and netfilter are building blocks of a framework inside the Linux 2.4.x and 2.6.x kernel. This framework enables packet filtering, network addresss [and port] translation (NA[P]T) and other packet mangling. It is the re-designed and heavily improved successor of the previous Linux 2.2.x...


Platforms: *nix

R-Linux is a data recovery and undelete utility for Ext2FS (Linux) file system. File recovery after power failure, system crash, virus infection or partition reformation, even for the different file system. Unformat and unerase tool. Creation of image files an entire disk, partition or its part....


Platforms: Windows

DiskInternals Linux Recovery is a handy no-cost utility that runs under any version of Windows and designed to recover the erased or damaged information that is kept on Ext2/Ext3 partitions. DiskInternals Linux Recovery might come in handy on a number of occasions when due to the unforeseen...


Platforms: Windows

Free digital transcription software for typists on Linux - Express Scribe is professional audio playback control software designed to assist the transcription of audio recordings. It is installed on the typist's computer and can be controlled using the keyboard (with 'hot' keys) and/or foot...


Platforms: *nix