Netfilter

NetSplitter is a ( user-level ) network load-balance. It is like a transparent-proxy and will balance ( output ) TCP connections on multiples links. Linux NAT add/remove code is incomplete. NetSplitter will use the system() function to run the iptables to handle this. Step 1) IPTABLES Tell...

POP3 Virus Scanner Proxy is a full-transparent proxy daemon which scans all mails for viruses using third party scanners (built-in support for AVPD and Trophie). You have to set up a port redirection in the linux-netfilter (iptables) so that all connections from e.g. inside your office to any...

Perlipq is a Perl extension to Linux iptables userspace queueing via libipq.Packets may be selected from the stack via the iptables QUEUE target and passed to userspace. Perlipq allows these packets to be manipulated in Perl and passed back to the stack. This is version 1.25, released for...


Platforms: *nix

IPTables log analizer displays Linux 2.4 iptables logs (rejected, acepted, masqueraded packets...) in a nice HTML page (it support rough netfilter logs but also Shorewall and Suse Firewall logs). This page shall be easy to read and understand to reduce the manual analysis time. This page...


Platforms: *nix

seppl is both a protocol definition and a software implementation of a new encryption layer for IPv4. seppl project makes use of symmetric cryptography for encrypting the whole traffic on a network. Its implementation is designed around Linux netfilter/iptables. seppl introduces two new...


Platforms: *nix

Yavipind is a secure tunnel aka 2 peers securely forwarding packets toward each other. It forwards any kind of packet (IPv4, IPv6 or other) sent over the virtual point-to-point device (e.g. tun0). It fully runs in linux userspace. yavipin has been written because i wasnt satisfied by the...


Platforms: *nix

nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC. HiPAC is a novel framework for packet classification which uses an advanced algorithm to reduce the number of memory lookups per packet. nf-hipac package is ideal for environments involving...


Platforms: *nix

Sshguard protects networked hosts from the todays widespread brute force attacks against ssh servers. It detects such attacks and blocks the authors address with a firewall rule. This project is BSD licensed. How sshguard works Sshguard monitors ssh servers from their logging activity. It...


Platforms: *nix

IM-Filter is a daemon for GNU/Linux firewall hosts written in C which is able to analyze and filter the ICQ protocol. The daemon runs in userspace and fetches packets of the ICQ protocol by using the libnetfilter_queue mechanism. IM-Filters main purpose is to run at a gateway, so all...


Platforms: *nix

Prelude-LML is a signature-based log analyzer monitoring your log file and received syslog messages for suspicious activity. It handle events generated by a large set of components, including but not limited to: APC Emu, BigIP, Cisco PIX, Clamav, Dell-OM, Grsecurity, Honeyd, ipchains,...


Platforms: *nix

IPKungFu is an iptables-based Linux firewall. The primary design goals are security, ease of use, and performance, in that order. It takes advantage of advanced features of iptables, tcpwrappers, and the Linux kernel. IPKungFu can handle a wide array of configurations, and supports Internet...


Platforms: *nix

Yafig is a LAMP-based firewall rule generator. Yafig is a LAMP-based firewall rule generator that creates shell scriptsfor use with Linux netfilter/iptables..


Platforms: *nix

Honeytrap project trap attacks against tcp services. Honeytrap is a network security tool written to observe attacks against TCP services. As a low-interactive honeypot, it collects information regarding known or unknown network-based attacks and thus can provide early-warning information. The...


Platforms: *nix

The Bait and Switch Honeypot is a multifaceted attempt to take honeypots out of the shadows of the network security model and to make them an active participant in system defense. To do this, we are creating a system that reacts to hostile intrusion attempts by redirecting all hostile traffic...


Platforms: *nix

LutelWall (formerly known as Lutel Firewall) is high-level linux firewall configuration tool. It uses human-readable and easy to understand configuration to set up Netfilter in most secure way. Its flexibility allows firewall admins build from very simple, single-homed firewalls, to most complex...


Platforms: *nix

Firewall Admin is not a firewall generator. This tool allows network administrators to manage iptables rules from anywhere though a simple administration interface through a Web browser. Any user can put some extra plug-ins to interact with netfilter modules..


Platforms: *nix

Yavipind is a secure tunnel aka 2 peers securely forwarding packets toward each other. It forwards any kind of packet (IPv4, IPv6 or other) sent over the virtual point-to-point device (e.g. tun0). It fully runs in linux userspace. Features:Network efficiency: - small packet overhead: 26bytes...


Platforms: *nix, C/C++, BSD

iptables and netfilter are building blocks of a framework inside the Linux 2.4.x and 2.6.x kernel. This framework enables packet filtering, network addresss [and port] translation (NA[P]T) and other packet mangling. It is the re-designed and heavily improved successor of the previous Linux 2.2.x...


Platforms: *nix

Service Guardian is a software that aims to protect servers against various things such as connection floods and resource exhaustion. It can measure the number of connections to servers' ports and, after a grace time period, compares and sees if the host is still in violation of the specified...


Platforms: *nix

Console Password Manager is a small console tool to manage passwords and store them public key encrypted in a file - even for more than one person. The encryption is handled via GnuPG so you can access the programs data via gpg as well, in case you want to have a look inside. The data is stored...


Platforms: *nix