Open Source C Firewall Software - Page 5

iptables-TNG ( The Next Generation of iptables) An environment that can use different packet classification algorithm (eg. tuple) to support large rulesets (more than 10,000 rules) for high bandwidth networks.

ISP-fW is a firewall script that provides port forwarding, packet filtering, stateful packet inspection, port redirection, masquerading, SNAT/ DNAT, TOS, and never the last it generates htb rules for bandwich management. Includes: htb-tools, mipclass

IPFC is a distributed management solution for security module (firewall, nids). Security module can be packet-filtering (ipfw,netfilter,ipf ...), NIDS or any other servers (syslog...) or embedded devices.

Iptables FIlter Generator is a easy way to make iptables rules..

Iroffer with mIRC-style DCC Server Protocol that might allow sends through firewalls without reconfigurations (and some more extra features)

KFW aims to be a simple to use but powerful Firewall/IDS. That will have a GUI designed since its origins, and will use state of the art firewalling and intrusion detection techniques to achieve maximum performance.

The Kernel Intrusion Detection System-KIDS, is a Network IDS, where the main part, packets grab/string match, is running at kernelspace, with a hook of Netfilter Framework. The project is not ready for use, then incomplete pieces of code may be found.

Krome Shield is designed to fool remote fingerprinting tools (using ICMP & TCP), making them think you're running a different OS. It runs under Linux, using the netlink device and ipchains. In the future it will act like an IDS too, detecting attacks a

Linmkfwall is able to set up a firewall for your linux box ( ipfwadm, ipchains and iptables are supported ). The firewall rules are put in a Unix script shell file that you have to execute as root.

LFR is a Linux/Netfilter based firewall/router on a single floppy disk. Think of it as a micro Linux distribution with a purpose. With LFR you can take that old 486 with 4 MB of RAM that you have in the closet and put it to good use. With a pair of ch

lpt simulates an IP packet traversing the Linux kernel and prints out what happens as it progresses through the security features of the kernel and quickly determine wether or not the packet will pass.

A replacement firmware distribution for the 3com 3CRADSL72 a.k.a 3com wireless 11g (distributed by Ya.com) and its identical twin, the SMC7804WBRA, with an ucLinux kernel based system and associated system tools.

linux4501 is a linux software distribution for the soekris net4501 single board PC (see www.soekris.com). It fits on a 16 or 32 MB Compactflash card and turns the 4501 into a firewall and (dsl) router. It can also be used as a starting point for your ow

Client-Server mechanism to manage Linux-netfilter-box using other firewall platform syntax. Currently implemented interpreter for Cisco PIX.

LnxFire is a Linux & Gnome firewall tool for the small business owner. Use the firewall creation wizard to quickly create a basic firewall. Featuring dynamic rule modifiers, proactive monitoring, reporting, email alerts and auto lockout of port scanners.

LogCop is a set of turn-key bash/firewall/awk scripts for enhancing an IDS. It monitors system logs and blocks IP addresses based on such criteria as illegal user names from repeated attacks. In production under Linux, FreeBSD, OS X, Solaris.

LrFW Is a Linux RAM Baised Firewall. A fully featured firewall and router with no moving parts to break. In the future I may also write an optional Cisco PIX translator and interface.

Development area for GNU/Linux 2.6.x for the KS8695 ARM SoC. Covers kernel patches, drivers for serial, Ethernet, PCI, GPIO, watchdog subsystems, and drivers for optional PCI based devices such as USB, WiFi, WiMAX, IPSec, SSL, and RSA devices.

1.68MB floppy using the 2.4.6 kernel which includes IPTABLES. Most if not all packages in this dist are out of date. I would recommend using LEAF at http://leaf-project.org/ which is more up to date.

MultiGate is a multi-function security gateway (firewall). Built on Linux and Open Source components, it provides an easy and integrated solution designed to secure and protect networks via SecurityPlugins that enhance the capabilities of the gateway.

NatACL is a firewall group policy controller for intranets and Internet for linux.

Internet Control Firewall Intrusion Detection and Logger for Inbound and Outbound Traffic. Watches Files and Directories, Drive and Memory Protection.

We implement an open source conflict resolution framework that consists of a user-space C application that automatically resolves firewall rules anomalies, and b) a generic tree (called policy tree), implemented as a Linux kernel module which maintains the resolved firewall rules and enables the necessary hooks to netfilter for matching incoming (or outgoing) network packets. Tree-based data structures offer improved efficiency compared to traditional access control lists (e.g. iptables or nftable maps), especially for large systems with a huge number of rules. Preliminary analysis from our implementation on ARM-based embedded systems examines efficiency and scalability of our framework. To reference this work: A. Papagrigoriou, P. Petrakis, M.D. Grammatikakis, "A firewall module resolving rules consistency", Workshop on Intelligent Solutions in Embedded Systems (WISES), 2017, pp. 47-50. Available from: https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7986931

OctopusWAF is a open source Web application firewall, is made in C language uses libevent to make multiple connections. Event-driven architecture is optimized for a large number of parallel connections (keep-alive) which is important for high performance AJAX applications. This tool is very light, you can deploy in any please, this resource turn perfect to protect specific endpoint that need a custom protection.

ISO 17799 - Code of practice for information security management. Creation of methodology and documentation for audit adapted to ISO. One is made up of an introduction on general aspects of the security of the information.