Host Based Firewall

SekHost is a host based firewall and packet prioritization utility for Linux systems. The configuration is simple yet powerful functionality is available. Installation of sekhost is very straightforward and actually only requires 2 things; the sekhost script itself, which is in the src... Platforms: *nix

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains and Windows XP system logs, and mysql or postgresql ulogd database logs using the iptables ULOG target of netfilter.For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc. Platforms: Windows, Mac, BSD, Solaris, Linux

ImSafe (Immune Security For your Enterprise) is a host-based intrusion detection tool. After a learning phase, it is able to detect changes in processes behavior, to detect buffer overflows, etc. It is implemented through a device driver (as a kernel patch) for the Linux kernel, but can also be... Platforms: *nix

PacketFlow Firewall Generator is an XML based firewall generator. It takes an XML configuration file that defines the firewall policy and generates a list of iptables commands to implement this policy. It is primarily intended for use on dedicated firewalls, but it can be used in other scenarios.... Platforms: *nix

The PCX Firewall is a perl script that generates a customized shell script to start, stop and restart the IPTables based firewall. You can build a MULTI-homed system or a Standalone system. DNAT, SNAT, Redirection, Blocking, etc. are all supported. Platforms: *nix, Perl, BSD

What are the packets rejected by your Netfilter based firewall today ? How often this suspicious host try to connect to your box ? What are the most rejected domains ? Who is this strange host which scan your ports ?The responses are in the IPTables log analyzer. Platforms: PHP

Webfwlog is a flexible web-based firewall log analyzer and reporting tool. Webfwlog supports standard system logs for linux, FreeBSD, NetBSD, Solaris, Irix, OpenBSD, OS X, etc. as well as Windows XP. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP. Webfwlog... Platforms: *nix

Holepunch project is a web-based firewall session manager which opens and closes "holes" in your firewall based on a username/password combination. Each user directs his browser to the port HolePunch is running on and enters their username and password. Assuming correct authentication, certain... Platforms: *nix

An easy-to-use, self-configuring OpenBSD-based firewall with a web interface. Platforms: Mac, BSD, Linux

Yafig is a LAMP-based firewall rule generator. Yafig is a LAMP-based firewall rule generator that creates shell scriptsfor use with Linux netfilter/iptables.. Platforms: *nix

cp2fwbuilder (Checkpoint Firewall 1 to FwBuilder) helps you to migrate an existing Checkpoint Firewall 1 installation and its rulesets to Linux with iptables or a BSD-based firewall. This is done by converting the Rulebase- and the Objects- Database from Checkpoint to the FirewallBuilder XML... Platforms: *nix

LEAF Bering-uClibc is available for download as a single-floppy-based firewall or as an ISO-image. Additionally booting from HD, CF or an USB device is supported. The floppy image supports dhcp, ppp and pppoe connections out of the box and fits for a SOHO network demanding a stable and secure... Platforms: *nix

TuxGuardian is an application-based firewall with a graphical interface. It's main task is to control and forbid transmission & reception of data by unauthorized applications; it can be thought as the Linux equivalent to apps such as ZoneAlarm and Kerio Platforms: *nix

LANguard Security Event Log Monitor is a network wide event log monitor that retrieves logs from all NT/2000 servers and workstations and immediately alerts the administrator of possible intrusions for immediate host based intrusion detection. Using the LANguard event viewer you can also create... Platforms: Windows

System Safety Monitor (SSM) is a Host Based Intrusion Prevention System which will protect your system from all known and unknown malware, rootkits and "zero-day" attacks. SSM proactively keeps track of all running programs' behavior and blocks malicious or suspicious actions. Learning mode will... Platforms: Windows

TuxGuardian is an application-based firewall. TuxGuardian was developed after the observation that Linux security applications were not tailored for lay users. With TuxGuardian youll be able to implement access control policies to the network resources in order to identify and control every... Platforms: *nix

ShellTer is an iptables-based firewall. What sets it apart from the rest is that it has built-in SSH brute force protection. ShellTer project is easy to configure and has an interactive CLI installer. To install ShellTer, simply execute the "installer" file in this directory. Enjoy and feel... Platforms: *nix

Samhain is a multiplatform, open source solution for centralized file integrity checking / host-based intrusion detection on POSIX systems (Unix, Linux, Cygwin/Windows). samhain project has been designed to monitor multiple hosts with potentially different operating systems from a central... Platforms: *nix

gShield is an aggressive, modular, ipchains-based firewall script. gShieldConf is a small program to edit the configuration files for it. It is written using the gtk toolkit. It is released under the GNU GPL. Please note, gShield must be installed prior to running gshieldconf. The program will... Platforms: *nix

This script reads your iptables-based firewall configuration and displays your rules in the order in which packes will actually traverse them. Output is intuitive while closely resembling that of iptables-save, and indicates table ownership of rules, etc Platforms: Windows, Mac, Linux