Linux Netfilter Firewall

This is a KDE-based wizard aimed at making the process of setting up a linux netfilter firewall easy, especially on distributions with no firewall tool of their own, such as slackware. It creates a shell script, suitable for caling from an init script, or on slackware, being saved as... Platforms: *nix

specter is a user-space logging facility for the Linux netfilter system. It uses netfilters ULOG target to gather packets, and passes them to attached plugins. Its features a flexible and robust modularized structure, and is based on ulogd, but has improved design and wider functionality. It... Platforms: *nix

The Port Scan Attack Detector (psad) is a collection of three system daemons that are designed to work with the Linux Netfilter firewalling code to detect port scans and other suspect traffic. Port Scan Attack Detector project features a set of highly configurable danger thresholds (with... Platforms: *nix

DNS Blacklist Packet Filter project is a Linux netfilter client that decides whether to accept or drop packets based on the results of a DNS blacklist query (such as MAPS, SORBS, or SPEWS, to name a few). One use is to filter all incoming SMTP SYN packets for spam filtering.. Platforms: *nix

Nuface is a Web-based administration tool that generates Edenwall, NuFW, or simple Netfilter firewall rules. Nuface project features a high level abstraction on the security policy set by the administrator, and works internally on an XML data scheme. Its philosophy is to let you agglomerate... Platforms: *nix

Ufw stands for Uncomplicated Firewall, and is program for managing a netfilter firewall. It provides a command line interface and aims to be uncomplicated and easy to use. Platforms: *nix

Brcontrol is a set of patches to allow some interaction between a IDS and a firewall (currently snort and linux netfilter). It will help in the creation of aggresive honeypots or other advanced firewall and ids configurations. In can also work as bridge.. Get Brcontrol at SourceForge.net. Fast,... Platforms: *nix

pdumpq provides a pcap Dump for Linux/Netfilter QUEUE. pdumpq can be used to take queued packets from netfilter/iptables and dump them to a file that decoders like tcpdump, ethereal, and snort can read. You can also just pipe it through to the packet decoder and see what is in those packets... Platforms: *nix

fwLOGview is a graphical, real-time, colorized log viewer for Linux netfilter/iptables, Cisco Pix, *BSD ipfilter, Fortigate, and other logs. fwLOGview displays the log entries in colors related to the firewall action. You can hide unimportant columns, change the order in which columns are... Platforms: *nix

IP-Array is a Linux iptables firewall script written in bash. IP-Array allows the creation of precise, stateful rules, while remaining easy to configure. Goals: An easy to configure firewall - still leaving the user the possiblillity to configure detailed rules - which creates thight... Platforms: *nix

Solsoft NetfilterOne is a graphical interface that will automate the design, deployment and documentation of security rules and policies as they pertain to a networked netfilter firewall. As the name suggests, NetfilterOne will support one installation of the netfilter firewall. With Solsoft... Platforms: *nix

ipt_ACCOUNT is a high performance local network accounting system written for the Linux netfilter/iptables system. It has just two parameters: addr is the subnet which is accounted for tname is the table name where the information is stored The data can be queried later using the... Platforms: *nix

The Camarades Linux Proxy is a small program that is meant to run on a firewall protecting an internal network. It allows multiple users behind a firewall to use the Camarades Web camera program. To make it run the following: 1. Edit Makefile to see that everything seems ok. Make any... Platforms: *nix

Kharon Firewall is a shell script based on Iptables and written for Linux 2.4.x and 2.6.x.It can be used for a personnal or a professionnal usage and fully commented on in french. Platforms: *nix

TuxFrw is a set of scripts created to ease the way Linux IPTables rules are configured. Using TuxFrw an user can configure his own Linux / Netfilter based network firewall, simply passing some IP address numbers and other services utilization policie Platforms: *nix

HardWall Firewall is an iptables firewall script that provides port forwarding, packet filtering, stateful packet inspection, port redirection, masquerading, SNAT, DNAT, NAT, and bridging. HardWall Firewall functions as both a workstation firewall and an IP forwarding firewall. Whats New in... Platforms: *nix

Automatic Firewall is a script that will automatically configure a firewall. If you are a broadband or dial-up user who doesnt have a firewall script, you need to get one to protect yourself. AutoFW is made to help you do that with no efforts. Many people when connecting to the internet need a... Platforms: *nix

Linux LiveCD Router Documentation package contains documentation for the Linux LiveCD Router. Linux LiveCD Router allows you to share and firewall your broadband connection and use WiFi. It works with DSL, cable modem, T1, and dial-up connections and supports inexpensive hardware such as USB... Platforms: *nix

Webfwlog is a flexible web-based firewall log analyzer and reporting tool. Webfwlog supports standard system logs for linux, FreeBSD, NetBSD, Solaris, Irix, OpenBSD, OS X, etc. as well as Windows XP. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP. Webfwlog... Platforms: *nix

nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC. HiPAC is a novel framework for packet classification which uses an advanced algorithm to reduce the number of memory lookups per packet. nf-hipac package is ideal for environments involving... Platforms: *nix