PHANTUM - Punch-Hole Access for NAT Traversal of UDP in a Module; Built on top of Samy Kamkar's 'chownat' script, PHANTUM allows for pure client-agnostic TCP services to be tunneled over UDP and hosted behind NAT infrastructures.
A great gateway for small or medium network company,with builtin firewall, mutil WANs supporting loadblancing and failover ,VPN , anti virus, anti spams, web proxy , ... Base on pfSense
sbills is an Internet traffic monitor. If, for example, you have a local network with a Linux server that provides users with Internet access, it allows you to control Internet traffic.
This project started because I wanted to learn how to use the libpcap library with Objective C. Would like to include something like this: http://drdobbs.com/showArticle.jhtml?articleID=199102239&queryText=networking+computers
Netkeeper is an integrated intrusion prevention system for Linux. It incorporates snort IDS and iptables firewall, and its distributed and modularized design allows deployment in various network topologies.
Antivirus base on packets depending on protocol analysis.
Simulating an IP packet traversing the Linux kernel.
lpt simulates an IP packet traversing the Linux kernel and prints out what happens as it progresses through the security features of the kernel and quickly determine wether or not the packet will pass.
High interaction honeypot solution for Linux based systems
NOTICE: The format of this project has been changed from ISO to using ansible and has been moved to GitHub. Github link: https://github.com/Bifrozt/bifrozt-ansible
Tunnels TCP connections (map one port to another port)
A complex software (firewall, network access informant, traffic calculator) for xDSL subscribers of Sibirtelecom company. Only Novosibirsk city branch supported at now.
Webinterface to (un)ban IPs in Fail2Ban
This is a simple Webinterface to ban or unban IPs with Fail2Ban. Written in PHP. Uses fail2ban-client operations on the local socket. Questions? Contact me: steffen[at]php-works.net
Security proxy to clean up all unallowed constructions from HTTP requests, detect intruders and filter outgoing HTTP traffic against leaking classified data.
yafig is a LAMP-based firewall rule generator.
libpal is an easy-to-use, straightforward packet assembly library that allows programmers to forge any kind of IP, TCP, UDP, ICMP and application layer packages.
Program deploy a firewall, that is custom built, and is dynamic to the needs of the host. -- -- moved to www.siology.net
This project wants to provide useful tools for routing simple small private networks using a dial-up or broadband link. These tools consist of firewall and traffic shaping tools currently. Any feedback is welcome.
LrFW Is a Linux RAM Baised Firewall. A fully featured firewall and router with no moving parts to break. In the future I may also write an optional Cisco PIX translator and interface.
Linux distribution standing on a floppy: iptables, kernel 2.4.18, sshd support and easy to configure.
Krome Shield is designed to fool remote fingerprinting tools (using ICMP & TCP), making them think you're running a different OS. It runs under Linux, using the netlink device and ipchains. In the future it will act like an IDS too, detecting attacks a
Remote Packet Filter Control Daemon allows remote control and monitoring of OpenBSD's packet filter. It communicates with clients using RPFC protocol running on top of SSL (Secure Socket Layer).
OSA::net project main goal is to create an extensible, scalable framework for management of security related devices in middle-sized and large computer networks.
CompactBSD is a powerful set of tools that allow you to build your own customized, lightweight distribution of OpenBSD and then burn it onto compact flash so that it can be run on an embedded PC platform such as FatPort's FatPoint (www.fatport.com)
iptables managing tool. use gtk+/gnome and glade. rule manager can help to manage a rule.
Whoout is an IPTables/ipchains outgoing connection lister. The list refreshes every 5 seconds to provide real-time monitoring of the Internet Access going through a specific Gateway that is performing NAT.