Search Results for "netfilter-layer7"

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc.

netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance.

ipt-netflow is high performance NetFlow exporting module for Linux kernel (up to 4.15). Designed for Linux router in high-throughput network. This is netfilter/iptables module adding support for -j NETFLOW target. Designed to work efficiently w/o conntrack. Supporting NetFlow protocols v5, v9, and IPFIX. Accounting for IPv4, IPv6 traffic, and NAT translation events (NEL). Additional options is SNMP-index translation rules, aggregation rules, Ethernet type, MPLS, VLAN, and MAC addresses...

upnpry is an upnp port opener for linux. It intercepts upnp port opening requests to routers and opens the corresponding ports on the linux box.

We implement an open source conflict resolution framework that consists of a user-space C application that automatically resolves firewall rules anomalies, and b) a generic tree (called policy tree), implemented as a Linux kernel module which maintains the resolved firewall rules and enables the necessary hooks to netfilter for matching incoming (or outgoing) network packets. Tree-based data structures offer improved efficiency compared to traditional access control lists (e.g. iptables...

IPv6 to IPv6 Address Mapping Linux Kernel Module: a netfilter extension that implements IPv6-to-IPv6 address mapping (stateless NAT66 as discussed by IETF). Maps a private IPv6 address range (ULA) to a public IPv6 address range e.g. on an IPv6 router

nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.

The PortKnocko project is composed of two parts: an iptables module (user space) and a netfilter module (kernel space). Both modules are used to implement the Port Knocking and SPA (Simple Packet Authentication).

mod_layer7 is an application switching and load balancing module for Apache 2.2.x . This module utilizes mod_proxy, mod_deflate and mod_cache and contains embedded Perl interpreter that enables request rewriting and other interesting features.

This Netfilter module implements the IVI translation algorithm. IVI is a stateless way to provide a bridge between the IPv6 world and the IPv4 world. More information here: http://datatracker.ietf.org/doc/rfc6219/ You need DNS64 to get this work

iplist is a list based packet handler which uses the netfilter netlink-queue library (kernel 2.6.14 or later). It filters by IP-address and is optimized for thousands of IP-address ranges.

The Kernel Intrusion Detection System-KIDS, is a Network IDS, where the main part, packets grab/string match, is running at kernelspace, with a hook of Netfilter Framework. The project is not ready for use, then incomplete pieces of code may be found.

Brings the functionality of Linux netfilter to Windows.

pam_iptrecent is a PAM module that interfaces with the Netfilter/IPtables Recent module IP lists. This allows PAM authenticated sessions to add (and remove) IP addresses to firewall rules on linux servers.

The purpose of the Hi-Performance Protocol Identification Engine/HiPPIE is to analyze network traffic, and determine what protocol is in use within a given session based on packets sent to the engine. Linux kernel mod with support for iptables/netfilter

kclamav is a lite and streaming version of the ClamAV virus scanner. It is built as a Linux 2.6 kernel module and hooks via the Netfilter API. The ClamAV virus database is loaded into kernel memory.

FPGA based hardware card which implements above 4 giga bps network traffic throughput under affordable hardware cost. With linux driver and kernel patch, software based IPTables/netfilter firewall can be easily upgraded to a multi-giga high end firewall.

Linux Layer7 Switching project tend to provide a robust linux kernel framework to support high speed layer7 switching. It implements a kernel module engine and a userspace daemon to drive this low-level kernel engine. Switching decision is made userland.

CRYPT extension for Netfilter/Iptables allows you to create an encrypted communication using stream and block ciphers. It also authenticates the packets.

The Knock Project is a collection of security tools providing increased client/server authentication. The server and its functionality is provided by the netfilter kernel interface. Included are the daemon, a GNU/Linux client and a Windows client.

The goal of WallFire is to build a very general and modular firewalling application based on netfilter or any kind of low-level framework. It will provide a multi-language API, command line and interactive tools as well as X11 or HTML front-ends.

Client-Server mechanism to manage Linux-netfilter-box using other firewall platform syntax. Currently implemented interpreter for Cisco PIX.

Module for NET-SNMP to give information about number of packets in/out and bytes in/out per ip, based on information from netfilter rules.

bastion-firewall is a Netfilter based firewall for Linux. It can generate graphical stats of all the rules traffic in the firewall with Rrdtool and it's integrated with the Snort Inline IPS. It's written in the bash and C programming languages.

IPQReader reads packets from netfilter QUEUE target, using libipq. It prints data in plain txt or XML. The goal is to recognize all IP-based protocols and print as much information as possible in human-readable form, without losing any bit of data.