Siproxd is a proxy/masquerading daemon for the SIP protocol. It allows SIP clients (softphones & hardphones) to work behind an IP masquerading firewall or router.
Open source firewall project for Unix systems
Firewall log analyzer
Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs and netfilter and ipfilter system file logs. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.
CompactBSD is a powerful set of tools that allow you to build your own customized, lightweight distribution of OpenBSD and then burn it onto compact flash so that it can be run on an embedded PC platform such as FatPort's FatPoint (www.fatport.com)
Hogwash is an inline packet scrubber that uses Snort's (www.snort.org) detection engine to drop malicious packets before they reach the target machine.
this firewall is a union of lot of tool distributed free for the OS NetBSD, OpenBSD and FreeBSD, use web services with xml-rpc and soap, and a desktop too based on Gtk
Campagnol is a decentralized VPN over UDP tunneling. It uses UDP hole punching to open connections through NAT/firewall and OpenSSL's DTLSv1 implementation for mutual authentication and encryption.
DaemonWall is an OpenBSD-based network security live CD which can act as an Internet firewall/gateway.
This library allow you to create any tunneling applications over a ftp proxy. This is useful if you want to access a mail server from a place where pop connections are not allowed.
IPFC is a distributed management solution for security module (firewall, nids). Security module can be packet-filtering (ipfw,netfilter,ipf ...), NIDS or any other servers (syslog...) or embedded devices.
A port of MandrakeSoft's "Network Appliance Administration Tool" to OpenBSD.
A Bourne shell script that monitors the OpenBSD packet filter firewall and provides a summary in HTML form.
Robust and flexible VPN network tunnelling
OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single TCP/UDP port. Discussion forums and project wiki can be found here: https://forums.openvpn.net/ http://community.openvpn.net/openvpn
PyKnock is a total revolutionary method of Port Knocking. The client will send crypted,compressed command/message through UDP packets to daemon'specific port,the daemon will check the correctness of the message and it will execute a command.
Sonate is a java GUI for OpenBSD pf packet filtering. Optional code can be compiled to OpenBSD host to transfer generated configuration using SSL