Netfilter

DNS Blacklist Packet Filter project is a Linux netfilter client that decides whether to accept or drop packets based on the results of a DNS blacklist query (such as MAPS, SORBS, or SPEWS, to name a few). One use is to filter all incoming SMTP SYN packets for spam filtering..

LutelWall (formerly known as Lutel Firewall) is high-level linux firewall configuration tool. It uses human-readable and easy to understand configuration to set up Netfilter in most secure way. Its flexibility allows firewall admins build from very simple, single-homed firewalls, to most complex...

Firewall Admin is not a firewall generator. This tool allows network administrators to manage iptables rules from anywhere though a simple administration interface through a Web browser. Any user can put some extra plug-ins to interact with netfilter modules..


Platforms: *nix

The Port Scan Attack Detector (psad) is a collection of three system daemons that are designed to work with the Linux Netfilter firewalling code to detect port scans and other suspect traffic. Port Scan Attack Detector project features a set of highly configurable danger thresholds (with...


Platforms: *nix

layer7-firewall provides an easily configured layer seven firewall. layer7-firewall is an easily configured layer seven firewall. It boots from a CD, using a floppy disk for data storage. Layer7-firewall is a firewall which filters data in layer7 OSI model and has implemented QoS. Netfilter...


Platforms: *nix

TuxFrw is a set of scripts created to ease the way Linux IPTables rules are configured. Using TuxFrw an user can configure his own Linux / Netfilter based network firewall, simply passing some IP address numbers and other services utilization policie


Platforms: *nix

Layer-7 Packet Classifier for Linux is a classifier for the Linux kernels Netfilter subsystem that identifies packets based on application layer data (OSI layer 7). This means that it can classify packets as HTTP, FTP, Gnucleus, eDonkey2000, etc, regardless of port. Our classifier complements...


Platforms: *nix

Nulog is a firewall log analysis interface written in php. Netfilter is able to log selected packets directly in a database like MySQL or PostgreSQL. Nulog uses this interface to display security events in real-time on a user-friendly interface..


Platforms: *nix

Solsoft NetfilterOne is a graphical interface that will automate the design, deployment and documentation of security rules and policies as they pertain to a networked netfilter firewall. As the name suggests, NetfilterOne will support one installation of the netfilter firewall. With Solsoft...


Platforms: *nix

Wflogs is a firewall log analysis tool. It can be used to produce a log summary report in plain text, HTML and XML, or to monitor firewalling logs in real-time. This project is part of the WallFire project, but can be used independently. Usage examples: wflogs -i netfilter -o html...


Platforms: *nix

fwLOGview is a graphical, real-time, colorized log viewer for Linux netfilter/iptables, Cisco Pix, *BSD ipfilter, Fortigate, and other logs. fwLOGview displays the log entries in colors related to the firewall action. You can hide unimportant columns, change the order in which columns are...


Platforms: *nix

WallFire is a very general and modular firewalling application based on Netfilter or any kind of low-level framework. It will enable to manage every aspect of a firewall administration, from configuration to monitoring, intrusion detection, etc... WallFire will provide command line and...


Platforms: *nix

patch-o-matic-ng it is a system to apply netfilter-related patches to the latest kernel and/or iptables sources. FOLLOW THESE STEPS: 0) There may be some outstanding bugfixes or tweaks which are not yet in the official kernel. To look through these, do: #...


Platforms: *nix

The Bait and Switch Honeypot is a multifaceted attempt to take honeypots out of the shadows of the network security model and to make them an active participant in system defense. To do this, we are creating a system that reacts to hostile intrusion attempts by redirecting all hostile traffic...


Platforms: *nix

IPTables log analizer displays Linux 2.4 iptables logs (rejected, acepted, masqueraded packets...) in a nice HTML page (it support rough netfilter logs but also Shorewall and Suse Firewall logs). This page shall be easy to read and understand to reduce the manual analysis time. This page...


Platforms: *nix

Webfwlog is a flexible web-based firewall log analyzer and reporting tool. Webfwlog supports standard system logs for linux, FreeBSD, NetBSD, Solaris, Irix, OpenBSD, OS X, etc. as well as Windows XP. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP. Webfwlog...


Platforms: *nix

Prelude-LML is a signature-based log analyzer monitoring your log file and received syslog messages for suspicious activity. It handle events generated by a large set of components, including but not limited to: APC Emu, BigIP, Cisco PIX, Clamav, Dell-OM, Grsecurity, Honeyd, ipchains,...


Platforms: *nix

libnfnetlink is the low-level library for netfilter related kernel and userspace communication. It provides a generic messaging infrastructure for in-kernel netfilter subsystems (such as nfnetlink_log, nfnetlink_queue, nfnetlink_conntrack) and their respective users and/or management tools in...


Platforms: *nix

rshaper is a Linux kernel module that limits the incoming bandwidth for packets aimed at different hosts. While the former issue can be addressed with the conventional shaper driver, the latter cant be easily addressed by the standard shaper. As a matter of facts, I have not been able to use...


Platforms: *nix

IPMENU is a user interface to Netfilter/iptables and Linux policy routing or traffic control, allowing you to edit firewall rules and configure the firewall to "mark" packets for policy routing or for class based queueing (CBQ). Netfilter is the Linux 2.4 subsystem for configuring a multi-homed...


Platforms: *nix