Search Results for "rules"
Sort By:
Showing 82 open source projects for "rules"
View related business solutions-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
1
OpenSnitch
OpenSnitch is a GNU/Linux port of the Little Snitch firewall
...Double click on a row to view the details of a process, rule, host or user. Once you know which are the common processes, IPs and hosts that your machine is connecting to, you can start creating permanent rules (Duration: always) to deny or allow them. You can also convert temporary rules to permanent by right-clicking on a temporary rule or by double-clicking on it, and then edit it. By default OpenSnitch UI listens on a local Unix socket in /tmp/osui.sock. -
2
simplewall
Simple tool to configure Windows Filtering Platform (WFP)
simplewall is an open-source Windows application that provides a user-friendly firewall control interface powered by Windows Filtering Platform (WFP), enabling users to block or allow outgoing and incoming network connections without diving into complex OS settings or command-line tools. The app presents a clean, intuitive UI where users can define rules based on process names, IP addresses, ports, and protocols, making it possible to restrict apps from accessing the internet or control specific traffic flows with fine granularity. Because simplewall leverages WFP directly, it operates at a low level in the network stack, ensuring reliable enforcement of rules system-wide while remaining lightweight. ... -
3
FireHOL
A firewall for humans.
...FireQOS is a program that sets up traffic shaping from an easy-to-understand and flexible configuration file. Both programs abstract away the differences between IPv4 and IPv6. so you can concentrate on the rules you want. You can apply rules for IPv4 or IPv6, or both, as you need. -
4
LuLu
LuLu is the free open-source macOS firewall
LuLu is a free, open-source firewall for macOS developed by Objective-See. It blocks unauthorized outgoing network connections, allowing users to monitor and control which applications can transmit data externally. Designed for privacy and security, LuLu provides real-time prompts, rule-based filtering, and an intuitive interface, making it a valuable tool for Mac users seeking visibility over their system’s network behavior. -
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
5
VPN Connection Sharing
Share a VPN connection with VMs or containers
Easily share a VPN connection with your virtual machines or containers with this script. Works with IPsec VPN connections (like strongSwan), and lets your VMs reuse the VPN connection of your host system. Create a desktop launcher to start the VPN connection sharing script whenever you need it. -
6
Full set of scripts to implemente a full featured firewall.
-
7
IP-Array
An iptables IPv4 firewall and traffic shaping program
A Linux IPv4 iptables firewall and traffic shaper. It allows flexible rule creation, while also shipping with presets for common needs. Rules are written in simple XML, allowing various ways to group and nest the arguments. An interactive mode is available in order to build configuration files in a wizard based manner. Extensive documentation is also included. -
8
Verigio - DNS Proxywall / DNS Firewall
One of the most advanced DNS Proxy and DNS Firewall in one product.
It is a versatile DNS Proxy server with DNS firewall which filters DNS traffic between local computer and DNS servers with flexible rules, supports blocking by IP geography, caching, import/export rules into XML. With a click of a button acts as a DNS proxy (or DNS server), supports multiple client authentication methods, calculates statistics for DNS servers and proxy clients, supports load balancing between multiple upstream DNS servers. -
9
OWASP ModSecurity CRS
OWASP ModSecurity Core Rule Set (CRS) Project
...It focuses on broad protection—SQL injection, cross-site scripting, local/remote file inclusion, command injection, and protocol violations—without requiring app-specific knowledge. Rules are organized into paranoia levels so operators can tune detection aggressiveness and balance false positives against coverage. An anomaly-scoring model accumulates rule hits per request, enabling nuanced blocking thresholds and easier incident triage. The project ships with extensive documentation, exclusion packages, and testing tools to help tailor deployment for frameworks, CDNs, and APIs. ... -
Stop Cyber Threats with VM-Series Next-Gen Firewall on AzureGain integrated visibility across all traffic in a single pass. Deploy Palo Alto Networks VM-Series to determine application identity and content while automating security policy updates via rich APIs.
-
10
WinFire
Create and delete block rules for the Windows firewall
WinFire is a batch file (CMD line script) that allows fast and simple creation of blocking rules on executable applications, DLL's and any other file type. Rules will be created using the management prefix 'WinFire' for single application executable or all application executables/'types defined' within a directory and subdirectories (recursive). * These block rules are shown ticked/selected in "...Windows Firewall\Allowed Programs". -
11
Please see http://firehol.org/ for up-to-date releases and information. FireHOL is a stateful iptables packet filtering firewall configurator. It is abstracted, extensible, easy and powerful. It can handle any kind of firewall, but most importantly, it gives you the means to configure it, the same way you think of it.
-
12
You can make a simple MSN control (which users can login), web authentication gateway (Horatio based), load balance (iproute2), traffic shape (QoS), simple packet filter and NAT redirects (DNAT), loadbalance and VPN gateway or roadwarrior and ...
-
13
360-FAAR Firewall Analysis Audit Repair
360-FAAR Analyze FW1 Cisco Netscreen Policy Offline Using Config/Logs
...Read Policy and Logs for: Checkpoint FW1 (in odumper.csv / logexport format), Netscreen ScreenOS (in get config / syslog format), Cisco ASA (show run / syslog format), 360-FAAR compares firewall policies and uses CIDR and text filters to split rulebases / policies into target sections and identify connectivity for further analysis. 360-FAAR supports, policy to log association, object translation, rulebase reordering and simplification, rule moves and duplicate matching automatically. Allowing you to move rules to where you need them. Build new rulebases from scratch with a single 'any' rule and log files, with the 'res' and 'name' options. Switch into DROPS mode to analyse drop log entries. -
14
lua-resty-waf
High-performance WAF built on the OpenResty stack
...It inspects requests and responses during NGINX phases, applying rule logic and anomaly scoring to detect patterns like SQL injection, cross-site scripting, and protocol abuse. Rules are organized into policies with configurable actions—block, log, or allow—and can leverage shared dictionaries for counters, rate limits, and caching decisions. Because it runs inside the NGINX event loop, it scales with the web tier and avoids the latency of external proxies. Operators can extend it with custom Lua code, integrate threat feeds, or adapt it to application-specific quirks without recompiling modules. ... -
15
NetFireCoRE
Network Firewall Linux Kernel Module with Conflict Resolution Engine
We implement an open source conflict resolution framework that consists of a user-space C application that automatically resolves firewall rules anomalies, and b) a generic tree (called policy tree), implemented as a Linux kernel module which maintains the resolved firewall rules and enables the necessary hooks to netfilter for matching incoming (or outgoing) network packets. Tree-based data structures offer improved efficiency compared to traditional access control lists (e.g. iptables or nftable maps), especially for large systems with a huge number of rules. ... -
16
Juniper SRX policy to CSV
Extract and Convert Juniper Firewall Policies to CSV
Perl script that connect via SSH to your Juniper SRX firewall and extract the firewall rules, Parses them and produces a local csv file for import into excel. Written to fill a requirement, If you fix it or make it better please let me know? -
17
SEConnector firewalling/routing gateway SECurity-System for Linux based on kernel 2.6 and iptables
-
18
OpengateM
A MAC address based user authentication system for campus-wide network
This system restricts the network users and records usage log of the users. It is applicable to the campus wide network and is compatible to almost all network terminals. MAIN DEVELOPMENT SITE IS MOVED FROM here TO "https://osdn.jp/projects/opengatem/" -
19
flex-fw
flex-fw is a small and fast console frontend to iptables
flex-fw is a small and fast console frontend to iptables with an easy syntax similar to pf, ipf or ipfw from BSD systems. The main goal was making a lightweight tool to manage tons of iptables rules on multiple Linux hosts with a similar configuration. -
20
fw-script is a tool that parses firewall rules in fw-script format. It's main usage is to configure iptables firewall cheaply, easily and quickly. The power of it is not the script itself but the way you can use it.
-
21
QuickDefence - WAF
Nginx and Lua Based Easy to setup Web Application Firewall
Project has been moved to: https://github.com/jaydipdave/quickdefencewaf QuickDefence is an Nginx and Lua based easy to setup and configure web application firewall. It allows users to write own rules in very simple language. Because of Nginx, It is very easy to setup load balancing between servers and Nginx almost doubles the website performance by its caching mechanism. -
22
Fail2Ban monitors log files like /var/log/pwdfail or /var/log/apache/error_log and bans failure-prone addresses. It updates firewall rules to reject the IP address or executes user defined commands. Please see code and download from https://github.com/fail2ban/fail2ban . SF Fail2ban portal might not be up-to-date
-
23
Sphirewall is a user centric analytical network firewall/router, its the only open source product that provides user/group and role based firewall rules with extensive reporting services
-
24
jkaptive
A simple captive portal
...The reason behind this is because a lot of site administrators don't need tight security - their site is just a café which offers free internet access on an unsecured WLAN access point connected to the internet and they need a ticketing system to make it cumbersome for average people to use this offering without actually buying a single coffee. Jkaptive itself just presents the login page,checks the token and places netfilter rules. Telling apart ticketed from unticketed traffic is done through Linux' netfilter. As no proxy server is involved, jkaptive has no performance penalty, nor does it create problems with non-http traffic. Once the token is accepted, jkaptive is out of the way of any network packets completely. For presenting the login page, jkaptive has a built-in webserver, so no additional webserver application is needed. -
25
This is a firewall and an authenticated gateway script written in perl and bash translating rules to iptables and squid.
