Search Results for "iptables"
Sort By:
Showing 74 open source projects for "iptables"
View related business solutions-
Build Securely on AWS with Proven FrameworksMoving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
-
Demo Series - Small Business Backup By VeeamWatch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.
-
1
UFW Docker
To fix the Docker and UFW security flaw without disabling iptables
UFW is a popular iptables front end on Ubuntu that makes it easy to manage firewall rules. But when Docker is installed, Docker bypasses the UFW rules and the published ports can be accessed from outside. Almost all of these solutions are similar. It requires disabling docker's iptables function first, but this also means that we give up docker's network management function. -
2
Kubernetes DNS
Kubernetes DNS service
This is the repository for Kubernetes DNS(kube-dns and nodelocaldns). Vulnerability patches are mainly for debian-base or debian-iptables images. They can be updated to the latest by modifying rules.mk and dnsmasq Makefile. -
3
ShellCrash
Run sing-box/mihomo as client in shell
ShellCrash is a shell-based client runner for proxies like sing-box and mihomo, optimized for headless devices (e.g. OpenWrt routers). It provides scripted installation, automatic configuration reload, network port detection, and UI-less control via terminal. It simplifies running proxy services on embedded Linux devices. -
4
V2rayU
A tool to manage v2ray config json
V2ray multi-user management script, wizard-style management [new|delete|modify] transmission protocol, enjoy the fun of V2ray. Quickly view server connection information, general configuration modification. Freely change the transmission configuration. Upgrade command (keep the configuration file, if the upgrade fails, please install it completely). Call v2ray official api for traffic statistics. Multi-user, multi-port management , mixed transmission protocol management is no longer a dream.... -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
5
Antrea
Kubernetes networking based on Open vSwitch
Antrea is a Kubernetes-native project that implements the Container Network Interface (CNI) and Kubernetes NetworkPolicy thereby providing network connectivity and security for pod workloads. Antrea extends the benefit of programmable networks from Open vSwitch (OVS) to Kubernetes. Antrea simplifies Kubernetes networking across differing clouds and operating systems with a unified network stack built atop Open vSwitch. Antrea is designed to ease deployment, operations and troubleshooting by... -
6
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently operates over IPv4 and does not yet support IPv6, meaning that users with IPv6 connectivity may bypass Tor routing. ... -
7
Tempesta FW
All-in-one solution for high performance web content delivery
...This is a drop-in-replacement for the whole web server frontend infrastructure: an HTTPS load balancer, a web accelerator, a DDoS mitigation system, and a web application firewall (WAF). Tempesta FW is the first and only hybrid of a Web accelerator and a multi-layer firewall. This unique architecture provides seamless integration with the Linux iptables or nftables. Tempesta FW services up to 1.8M HTTP requests per second on the cheapest hardware, which is x3 faster than Nginx or HAProxy. Tempesta TLS is about 40-80% faster than Nginx/OpenSSL and provides up to x4 lower latency. -
8
KUBEE ROUTER
Kube-router, a turnkey solution for Kubernetes networking
The Kube-router is a turnkey solution for Kubernetes networking with the aim to provide operational simplicity. Networking is hard as such. In a typical Kubernetes cluster, you would need to install multiple network components for various functionality. With many moving parts it makes Kubernetes networking even harder. Kube-router provides a cohesive yet lean and powerful alternative to several network components you would use. All this from a single DaemonSet/Binary. It doesn't get any... -
9
OpenFW UTM Community is a "turn-key" , fork solutions Endian Firewall UTM Community, linux security distribution that makes your system a full featured security appliance with Unified Threat Management (UTM) functionalities. The software has been designed for the best usability: very easy to install, use and manage and still greatly flexible. The feature suite includes stateful packet inspection firewall, application-level proxy HTTP with antivirus support, content filtering of Web...
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
10
TheSSS (The Smallest Server Suite)
Lightweight Server Suite for LAN
...The supported servers are: FSP, FTP/SFTP, HTTP/HTTPS, NBD, NFS, NTP, rlogin, SSH, Telnet, and TFTP. A proxy server (Polipo) with Tor anonymizer is also included. The main security components are 4MLinux Firewall (based on iptables) and Clam AntiVirus. TheSSS iso images are fully compatible with UNetbootin, which can be used to create an easy-to-use TheSSS Live USB. -
11
...Manages the tor systemd service automatically (starts on enable, stops on disable). Transparent Proxy Intercepts ALL outbound TCP at the kernel level using iptables + redsocks. Catches tools that ignore environment variables entirely (nmap -sT, curl, wget, Metasploit, Nikto, sqlmap, most Python tools, etc.)
-
12
Web-based Firewall Log Analyzer
Firewall log analyzer
Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc. -
13
fwknop
Single Packet Authorization, Port Knocking
fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter (fwknop supports iptables and firewalld on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD) and libpcap. SPA is essentially next-generation port knocking (more on this below). The design decisions that guide the development of fwknop can be found in the blog post "Single Packet Authorization: The fwknop Approach". -
14
haoel.github.io
Comprehensive guide on self-hosting proxies, VPNs and transparent gate
This repository is a hands-on, longform guide for building and operating your own “scientific” Internet access setup — i.e., self-hosted proxies, VPNs, and transparent gateways — so you can reach blocked resources, protect privacy, and learn the underlying networking principles. It walks through buying and evaluating VPSes (regions, bandwidth, CN2/GIA lines), enabling kernel/network optimizations (BBR), and applying production practices like TLS certificates with Let’s Encrypt and using... -
15
HiddenWall
hidden firewall, custom firewall in kernel
HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that block external access, because have a hook to netfilter on kernel land(think like a second layer for firewall). My beginning purpose at this project is protect my personal server, now is protect the machines of my friends. When i talk "friends", i say peoples that don't know how to write low level code. ... -
16
TinyWall
Personal Linux firewall
Personal Linux firewall on bash, iptables and Zenity. Russian and English l10n. -
17
lxcm
Lightweight and secure container and firewall manager.
Simplified container management system with shared compressed templates, backups, firewall management, and secure defaults. -
18
allow22
Punch a temporary hole through your firewall to reach your network
When VPN isn't available and you need to get into your and your linux server. IP forwarding is turned on and port 22 bocked with IPtables. This is a bash script/CGI that if you know the URL and know the remote IP address where you are coming from, you can open a hole with iptables using a web browser and never have to login to the server. Then lock it back down when you are done. -
19
TorVM
A VM for using Tor
Preconfigured Debian Virtual Machine for use with Tor. Features: - Newest available tor version. - Iptables-script for tunneling all traffic through Tor. - Preconfigured MATE desktop environment. -
20
a Qt4 program for monitoring the syslog file for iptables style log events, then sending that info to the notify-osd system to be displayed in a desktop bubble.
-
21
obx
OBX Openbox & Xfce4 Desktop
An Arch Linux based desktop environment based on Openbox and Xfce4. Full customization of themes, icons, login manager and so on. A simplified installer, compliments of the PacBang installer, written by Carl Duff. -
22
Comcast
Simulating bad network connections so you can build better systems
...It works by wrapping up some system tools in a portable(ish) way. On BSD-derived systems such as OSX, we use tools like ipfw and pfctl to inject failure. On Linux, we use iptables and tc. Comcast is merely a thin wrapper around these controls. Windows support may be possible with wipfw or even the native network stack, but this has not yet been implemented in Comcast and may be at a later date. On Linux, Comcast supports several options: device, latency, target/default bandwidth, packet loss, protocol, and port number. -
23
Bocker
Docker implemented in around 100 lines of bash
Bocker is a minimal, educational reimplementation of core container (Docker-like) functionality, done in about a hundred lines of Bash script. Its purpose is not to replace Docker’s full feature set, but to illustrate container primitives—namespaces, cgroups, layering, filesystem manipulation, network namespaces, etc.—in a transparent, minimal form. With bocker you can perform basic operations such as pulling an image, running a container, exec into a container, listing containers, and... -
24
iptables-cb
Scripted service managing iptable blocks by ISO
...Configuration is managed through a simple file listing ISO codes of countries to block in /etc/sysconfig much as any other service. Includes optimizations using ipset and leverage of a tree hierarchy in the generated iptables rules to ensure minimal performance impact on higher network traffic volumes. -
25
opensuseupdater
If you're lazy, and you use opensuse, you'll want these tools!
...It has gone through many revisions, and is probable to see many more in the future. The script automates the install of Updates, fail2ban, lynis, shellshock patches, iptables, disables login on unnessary accounts, nessus, nmap, artillery and nikto. Many more to come
