Build VMs, containers, AI, databases, storage—all in one place.
Start your project in minutes. After credits run out, 20+ products include free monthly usage. Only pay when you're ready to scale.
Get Started
Build Securely on Azure with Proven Frameworks
Lay a foundation for success with Tested Reference Architectures developed by Fortinet’s experts. Learn more in this white paper.
Moving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
Xtables-addons is a package that obsoletes the old patch-o-matic repository for the Linuxkernel and iptables. Instead of patching the kernel source, extensions are built as modules and thus allow extending kernels without recompilation.
A powerful network security tool, easy, safe and totally free.
BrazilFW is a mini Linux distribution designed to be used as a Firewall and Router that runs easily on older computers. An old PC running BrazilFW is much more powerful and efficient than commercial software for routing in offices and residences running on a "powerful" computer.
BrazilFW is based on Coyote Linux, which was designed by Joshua Jackson who discontinued Coyote Linux in version 2.24 in August 2005.
A Linux port of the OpenBSD/FreeBSD Cryptographic Framework (OCF). This port aims to bring full asynchronous HW/SW crypto acceleration to the Linuxkernel, OpenSwan, OpenSSL and applications using DES, 3DES, AES, MD5, SHA, PublicKey, RNGs and more.
Simulating an IP packet traversing the Linuxkernel.
lpt simulates an IP packet traversing the Linuxkernel and prints out
what happens as it progresses through the security features of the
kernel and quickly determine wether or not the packet will pass.
Network Firewall LinuxKernel Module with Conflict Resolution Engine
We implement an open source conflict resolution framework that consists of a user-space C application that automatically resolves firewall rules anomalies, and b) a generic tree (called policy tree), implemented as a Linuxkernel module which maintains the resolved firewall rules and enables the necessary hooks to netfilter for matching incoming (or outgoing) network packets. Tree-based data structures offer improved efficiency compared to traditional access control lists (e.g. iptables or nftable maps), especially for large systems with a huge number of rules. ...
A small tool to help downloading the IP block lists from I-Blocklist for Transmission/uTorrent/Vuze/etc, or converting the list to IPSET format for a kernel level IP blocker. Similar scripts are populated already. This one is written in C.
nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.
iplist is a list based packet handler which uses the netfilter netlink-queue library (kernel 2.6.14 or later). It filters by IP-address and is optimized for thousands of IP-address ranges.
The Kernel Intrusion Detection System-KIDS, is a Network IDS, where the main part, packets grab/string match, is running at kernelspace, with a hook of Netfilter Framework. The project is not ready for use, then incomplete pieces of code may be found.
Our generous forever free tier includes the full platform, including the AI Assistant, for 3 users with 10k metrics, 50GB logs, and 50GB traces.
Built on open standards like Prometheus and OpenTelemetry, Grafana Cloud includes Kubernetes Monitoring, Application Observability, Incident Response, plus the AI-powered Grafana Assistant. Get started with our generous free tier today.
The purpose of the Hi-Performance Protocol Identification Engine/HiPPIE is to analyze network traffic, and determine what protocol is in use within a given session based on packets sent to the engine. Linuxkernel mod with support for iptables/netfilter
kclamav is a lite and streaming version of the ClamAV virus scanner.
It is built as a Linux 2.6 kernel module and hooks via the Netfilter API.
The ClamAV virus database is loaded into kernel memory.
FPGA based hardware card which implements above 4 giga bps network traffic throughput under affordable hardware cost. With linux driver and kernel patch, software based IPTables/netfilter firewall can be easily upgraded to a multi-giga high end firewall.
IpTables Extension and Kernel Modul ipt_PORTNETSCAN English Detection of PORTSCAN's, NETSCAN's and COMBINEDSCAN's using quotas. Deutsch: PORTSCAN, NETSCAN und COMBINEDSCAN Erkennung auf Basis von IpTables_Regeln. Für die Erkennung können verschieden
Enable Linux firewall to support connection tracking and NAT of H.323 protocol. It supports RAS, Fast Start, H.245 Tunnelling, Call Forwarding, Signal Proxy/Softswitch, RTP/RTCP and T.120 based audio, video, fax, chat, whiteboard, file transfer, etc.
ip-session gets info of network trafic, such as sip, dip, sport, dport, etc. from linuxkernel; gets account info of each traffic, such as in/out bytes/pkgs, etc.; else, gives session management function, such as query/del, etc.
The Knock Project is a collection of security tools providing increased client/server authentication. The server and its functionality is provided by the netfilter kernel interface. Included are the daemon, a GNU/Linux client and a Windows client.
A replacement firmware distribution for the 3com 3CRADSL72 a.k.a 3com wireless 11g (distributed by Ya.com) and its identical twin, the SMC7804WBRA, with an ucLinux kernel based system and associated system tools.
Development area for GNU/Linux 2.6.x for the KS8695 ARM SoC. Covers kernel patches, drivers for serial, Ethernet, PCI, GPIO, watchdog subsystems, and drivers for optional PCI based devices such as USB, WiFi, WiMAX, IPSec, SSL, and RSA devices.
1.68MB floppy using the 2.4.6 kernel which includes IPTABLES. Most if not all packages in this dist are out of date. I would recommend using LEAF at http://leaf-project.org/ which is more up to date.
The software package repository for <a href=http://sourceforge.net/projects/fsos>FsOS</a>, including EP80579 drivers, SempSec drivers, linuxkernel patches and a lot of porting applications for FsOS