Open Source Firewall Software - Page 23

This shell program automatically configures FreeBSD 9.1 and above as a firewall with only 2 answers from the user. The main goals of this program are minimal user input, ease of use and sensible security defaults. It's written for the sh shell included in FreeBSD by default.

Statefull Firwalling on Linux Active-Active Clusters: * loadbalancing * synchronization of conntrack table

Running as a daemon it monitors /var/log/messages(configurable) for bastille iptables and PSAD scan alerts with a max threshold (configurable) It will block ip on iptables instantly and send abuse email out. Requires a few perl modules (tries to install)

blocklists for openbsd,freebsd,linux,iptables,bsd pf,pf,ipfilter,pfsense,opnsense

A daemon to detect spammers trying to harvest email addresses by username guessing and temporarily DROP them with iptables firewall rules. The program also looks for and kills sendmail processes that have been stuck in "cmd read" mode for a long time.

A daemon enabling the administrator to translate events (e.g. log events) into actions (e.g. firewall rules).

borpLAN: Basic Oppressof for Routed and Proxyed LAN. This software allow you to manage internet access into a small/scholastic network.

Bors is a theoretical project that would use DNS blacklists like those used for spam but on a nfqueue level. It uses ideas from mblock/nfblockd but instead of a local list it uses DNS blacklists to lookup if an IP is blocked and what category it belongs.

brutesshd is an application written in c/php in order to prevent bruteforce attacks through ssh. Brutesshd uses iptables/pfctl tools to block this type of attacks

Web Manager Firewall/Proxy for FreeBSD

chainssh is a shell script to smplify the ssh login via multiple sshgateways/firewallgateaways. e.g. connect from homehost via sshgateway to a clusternode with one command.

Firewall with qos (htb and diffserv)on a flash card with asterisk

Who is jiggling the door of your SMC Barricade firewall? This script will connect to one of those devices via the web interface, authenticate, grab the event log and then re-write the output as a simple HTML table.

Cluster-Manager Daemon that uses Netfilter clusterip to make active-active clusterip. Keep-alive notify messages are sent periodically to every clusternode. clusterip is configured automatically when there are changes in the cluster.

This package contains completions for conntrack, conntrackd and nfct.

diptables is simple shell script, that through one method interactive (using dialog and iptables) create a rule of iptables for the local machine. It is very interesting for who is starting to work with iptables.

DaM project's goal is to stop portscanners and most common attacks. It's just for Linux kernel and it's entirely written in C language.

deface-no-tnx is an anti-defacement system that monitors your Web files and notifies you about unallowed changes. It also replaces the defaced page with a standard "error" page,so that no offensive/joking content can be frauodolently added to your site

Full set of scripts to implemente a full featured firewall.

IpTables / OpenS/WAN based firewall management utility.

"diptables" is short for "distributed iptables" and as the name implies, it is trying to provide a facility to manage a large "firewall system" in which many number of single firwall machines exist. In this state, it is a very simple C++ program to add

Drakonwall is a simple but very powerful firewall for Debian GNU/Linux servers.

It's a IDS-receiver and written in C. Sometimes I want to drop remote IP xx seconds, and Undrop it when timeout; Sometimes my sniffer-server find a hack-action and I want to tell another server/server-group "Drop xxx.xxx.xxx.xxx IP xx seconds". So I written this program -- dynipdrop("dynipdrop" daemon and "ipdrop_local" to send a drop-msg from localhost, and "ipdrop_udp" to send a drop-msg to another server(installed the dynipdrop daemon). And I think: "Maybe I can make a client to drop the ssh-scan, like DenyHost(http://denyhost.sf.net)", so I write the "sshdprotector". dynipdrop run on linux and need iptables, I use "portsentry(http://sourceforge.net/projects/sentrytools/" + "sshdprotect" + "dynipdrop" to protect my servers, and hope this software make some help to you.

dynipsec solves the problem with dynamic ip addresses on both ends of an ipsec tunnel using FreeSWAN under Linux. It distributes the dynamic ips (and PTP addresses) to each peer of the ipsec tunnels via ssh and rebuilds the ipsec.conf and ipsec.secrets ev

This is a squid external authentication helper to facilitate SSO, single sign on, with Novell's eDirectory. It's written in mono and uses LDAP to access the information stored in eDirectory.