Iptables

Honeytrap project trap attacks against tcp services. Honeytrap is a network security tool written to observe attacks against TCP services. As a low-interactive honeypot, it collects information regarding known or unknown network-based attacks and thus can provide early-warning information. The...

nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC. HiPAC is a novel framework for packet classification which uses an advanced algorithm to reduce the number of memory lookups per packet. nf-hipac package is ideal for environments involving...

High Level Firewall Language (hlfl) permits writing firewalling rules using a high level language. It translates your high level language firewalling rules into usable rules for IPChains, NetFilter, IPFilter, Cisco, and many others. Renaud Deraison, founder of the Nessus Project, initiated this...


Platforms: *nix

ebtables is a filtering tool for a bridging firewall. A firewalling tool to transparently filter network traffic passing a bridge. The filtering possibilities are limited to link layer filtering and some basic filtering on higher network layers. Advanced logging, MAC DNAT/SNAT and brouter...


Platforms: *nix

Simple Firewall is a easy tool for administration users and access control. This tool is made for Linux. Using iptables for packet filtering Write in perl Save rules with xml. That can be run in bash shell and web interface via webmin. Whats New in This Release: - Perform reconfigure squid...


Platforms: *nix

Ruby Iptables NEtwork Displayer project draws an SVG from a Linux IP table generated by "iptables-save"..


Platforms: *nix

AGT is a powerful console frontend to iptables, supporting nearly all of the iptables extensions (such as quota, random, MIRROR, multiport, owner, string, MAC address, and more). All options can be specified in a configuration file with similar syntax to ipf and ipfw.. Get AGT at...


Platforms: *nix

Automatic Firewall is a script that will automatically configure a firewall. If you are a broadband or dial-up user who doesnt have a firewall script, you need to get one to protect yourself. AutoFW is made to help you do that with no efforts. Many people when connecting to the internet need a...


Platforms: *nix

Firetero is a firewall for a single computer. Default setup works for any workstation. For a server, sample configuration is available for most common daemons..


Platforms: *nix

moltiblock is a user-space plugin to netfilter for blocking lots of nets. No need to recompile kernel or patch other sources. To install just type make. Then copy the binary to /usr/local/sbin or wherever. Put one CIDR per line in /etc/moltiblock/cidr.deny, like so: -- snip --...


Platforms: *nix

ulogipac is a powerful IP traffic accounting tool for Linux routers and hosts. You can use the power of iptables rules to specify which traffic you want to account and which *not*. The size of IP packets sent to ulogipac through iptables is counted and buffered. After a configurable timeperiod...


Platforms: *nix

Firewall Monitor allows you to monitor ipchains/iptables output in realtime. It supports both logging to a file/stdout and/or to tcpdump format capture logs. It also supports security features such as running non-root, and chrooting itself. Fwmon can easily be integrated into an existing...


Platforms: *nix

ulogd is a replacement for traditional syslog-based logging (using the LOG target) in iptables-based firewalls. ULOG/ulogd has a different concept. Packets get copied to a special logging daemon, which can do very detailed logging to different targets (plaintext files, MySQL databases, ...)....


Platforms: *nix

IM-Filter is a daemon for GNU/Linux firewall hosts written in C which is able to analyze and filter the ICQ protocol. The daemon runs in userspace and fetches packets of the ICQ protocol by using the libnetfilter_queue mechanism. IM-Filters main purpose is to run at a gateway, so all...


Platforms: *nix

PCX Firewall is an IPTables firewalling solution that uses Perl to generate static shell scripts based upon the users configuration settings. This allows the firewall to startup quickly, as it does not have to parse config files every time it starts. Whats New in This Release: - All known...


Platforms: *nix

IPKungFu is an iptables-based Linux firewall. The primary design goals are security, ease of use, and performance, in that order. It takes advantage of advanced features of iptables, tcpwrappers, and the Linux kernel. IPKungFu can handle a wide array of configurations, and supports Internet...


Platforms: *nix

fireflier is a firewall tool, which is built on top of the iptables framework. It all started in February 2002, when I was sitting on my computer and doing the firewall settings for a small server. I realized, that allthough I know about firewall rules, my desktop machine was not secure, with...


Platforms: *nix

pam_shield is a PAM module that uses iptables to lock out script kiddies that probe your computer for open logins and/or easy guessable passwords. The project is meant as an aid to protect public computers on the open internet. Everybody knows it is unwise to leave computers largely unprotected...


Platforms: *nix

ferm is a tool to maintain and setup complicated firewall rules. It allows one to reduce the sometime nasty task of carefully inserting rules and chains, thus enabling the firewall administrator to spend more time on developing good rules, and less time on the proper implementation of those...


Platforms: *nix

mysqlWisp is a project which provides a standalone or mysqlISP-controlled subsystem. mysqlWisp provides a standalone or mysqlISP-controlled subsystem for managing one or hundreds of hotspots with access controlled by iptables, MAC addresses, IP addresses, and passwords. Access points are...


Platforms: *nix