you are here: home > security > tools > firewall
Call trans opt: receveid. 9-18-99 14:32:31 REC:log>
WARNING: carrier anomaly
Trace program: running
> Welcome 38.107.191.97
11.03.2010 - 00:47 (23:47 GMT)
5orry, you have... NO MAIL.

Firewall: The Complete Documentation

  • This category contains 21 Tools
  • The last tool was added on 2007-02-12 (YYYY-MM-DD)
  • Use the Source Lucie!!! >:)

 Dante -v1.1.18

Published on 2005-09-10 - by Inferno Nettverk, ©Inferno Nettverk.

Dante is a circuit-level firewall/proxy that can be used to provide convenient and secure network connectivity to a wide range of hosts while requiring only the server Dante runs on to have external network connectivity.

Once installed, Dante can in most cases be made transparent to the clients while offering detailed access control and logging facilities to the server administrator.

 EtherDam -v0.2

Published on 2004-04-28 - by kelledin, ©kelledin.

EtherDam is a firewall configuration engine that relies on iptables. It presents firewall configuration as a somewhat simpler scripting language that's still flexible enough for most purposes.

 fireflier -v1.1.4a

Published on 2004-01-18 - by hispirit, ©hispirit.

Fireflier is a firewall tool, which is built on top of the iptables framework. You can create rules based on single incoming network packets or simply allow/deny single packets to pass. client-server, ssl, timeouting rules, filtering by application.

 FireHOL -v1.226

Published on 2005-01-30 - by Costa Tsaousis, ©Costa Tsaousis.

FireHOL is a stateful iptables packet filtering firewall configurator. It is abstracted, extensible, easy and powerful. It can handle any kind of firewall, but most importantly, it gives you the means to configure it, the same way you think of it.

 Firestarter -v1.0.1

Published on 2004-12-13 - by Tomas Junnonen, ©Tomas Junnonen.

Firestarter is a free firewall tool for Linux machines. Whether you simply want to protect your personal workstation or you have a network of computers to secure, Firestarter is here to make your life easier. While a firewall can not guarantee security, it is the first line of defence against network based attacks.

 Firewalk -v0.5

Published on 2003-27-01 - by Mike D. Schiffman and David Goldsmith, ©Mike D. Schiffman and David Goldsmith.

Firewalk is an active reconnaissance network security tool that attempts to determine what layer 4 protocols a given IP forwarding device will pass. Firewalk works by sending out TCP or UDP packets with a TTL one greater than the targeted gateway. If the gateway allows the traffic, it will forward the packets to the next hop where they will expire and elicit an ICMP_TIME_EXCEEDED message. If the gateway hostdoes not allow the traffic, it will likely drop the packets on the floor and we will see no response.

 Firewall Builder -v1.1.2

Published on 2003-11-23 - by Vadim Kurland, Vadim Zaliva, ©Vadim Kurland, Vadim Zaliva.

Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF and Cisco PIX

 Firewall Tester -v0.9

Published on 2003-06-20 - by Andrea Barisani, ©Andrea Barisani.

The Firewall Tester is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities. The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in ftest.conf, with a signature in the data part while the sniffer listens for such marked packets. The scripts both write a log file which is in the same form for both scripts. A diff of the two produced files (ftest.log and ftestd.log) shows the packets that were unable to reach the sniffer due to filtering rules if these two scripts are ran on hosts placed on two different sides of a firewall. Stateful inspection firewalls are handled with the 'connection spoofing' option. A script called freport is also available for automatically parse the log files.

 Guarddog -v2.40

Published on 2004-12-16 - by Simon Edwards, ©Simon Edwards.

Guarddog is a firewall configuration utility for Linux systems. Guarddog is aimed at two groups of users. Novice to intermediate users who are not experts in TCP/IP networking and security, and those users who don't want the hastle of dealing with cryptic shell scripts and ipchains/iptables parameters.

 Killerwall -v0.12

Published on 2004 - by defile, ©defile.

Killerwall is a firewalling script for Linux 2.2.x and/or 2.4.x using either ipchains or iptables. It is a bash shell script (I know the top of the file says #!/bin/sh, but for most Linux distro's, that is a symbolic link to /bin/bash or /usr/bin/bash). The madness behind that is to use entirely POSIX tools to do it's job (sed, grep, awk...etc).

 Magic Box -v1.1

Published on 2004-05-19 - by security, ©Texas A&M University.

The main process (mbd) opens a tail pipe to the snort alert log (this is how alerts are gathered). Upon seeing an alert depending on the configuration 1 of 2 things is done. If it is configured to block on classtype, then the classtype (classification) of the rule is check and then that host is either blocked or not. If it set to block on every alert (default) then the host is blocked for the configured time limit. Upon getting blocked the web traffic of the infected host is redirected to a webserver. It is also now possible to (on the first alert generated by the host) send them a WinPopUp message (works only for Windows based clients). With a message.

 netfilter/iptables -v1.2.9

Published on 2003-11-02 - by Jozsef Kadlecsik, ©Jozsef Kadlecsik.

The netfilter/iptables project is the Linux 2.4.x / 2.5.x firewalling subsystem.It delivers you the functionality of packet filtering (stateless or stateful), all different kinds of NAT (Network Address Translation) and packet mangling.

 NuFW -v1.0.2

Published on 2005-03-29 - by Eric Leblond and Vincent Deffontaines, ©Eric Leblond and Vincent Deffontaines.

NuFW performs an authentication of every single connection passing through the IP filter, by transparently requesting user's credentials before any filtering decision is taken. Practically, this means security policies can integrate with the users directory, and bring the notion of user ID down to the IP layers.

 PfPro - Packet Filter Pro is Really Outrageous -v0.1.1

Published on 2004-12-08 - by Adam VanderHook, ©Adam VanderHook.

PfPro combines Java and XML to provide a graphical inteface for creating and maintaining firewall configurations for OpenBSD's PF firewall system. This firewall system has recently been ported to FreeBSD and NetBSD as well.

 ROPE -v20041212

Published on 2004-12-12 - by Chris Lowth, ©Chris Lowth.

ROPE is a "match module" for Linux IpTables that allows packets to be matched using highly flexible rules, written in a simple purpose-designed scripting language. It was written initially to provide support for the next phase of the P2PWall project for controlling various styles of peer-to-peer application traffic, but is much broader than this in it's possible uses. See the Basics page for a tutorial-style overview.

 Shorewall -v2.5.5

Published on 2005-02-15 - by Tom Eastep, ©Tom Eastep.

The Shoreline Firewall, more commonly known as Shorewall, is a high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables utility, Shorewall configures Netfilter to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus take advantage of Netfilter's connection state tracking capabilities.

 Sky-Fire -v1.0.1

Published on - by Skylinux, skylinux.

Sky-Fire is a secure, easy-to-use Linux firewall. It is a dynamic script that supports forwarding to two different subnets and running servers on the firewall. The script is designed to be as user friendly as possible. A setup script guides the user through the setup process.

 SunGazer Packetfilter -v0.2.3

Published on 2003-12-14 - by Marius Brehler, ©Marius Brehler.

The SunGazer Packetfilter is a small and simple tool to set up firewall rules. It works with iptables and is easy to use and configure.

 Turtle Firewall -v1.33

Published on 2005-09-09 - by Andrea Frigido, ©Andrea Frigido.

Turtle Firewall is a software which allows you to realize a Linux™ firewall in a simply and fast way.

It's based on Kernel 2.4.x and Iptables. Its way of working is easy to understand: you can define the different firewall elements (zones, hosts, networks) and then set the services you want to enable among the different elements or groups of elements.

You can do this simply editing a XML file or using the comfortable web interface Webmin.

 Vuurmuur -v0.5.61

Published on 2005-02-08 - by Victor Julien, ©Victor Julien.

Vuurmuur is a middle-end/front-end for netfilter/iptables aimed at system-administrators who need a decent firewall, but don't have netfilter specific knowledge. It is distributed under the terms of the GNU GPL

 WASap -v0.0.11

Published on 2003 - by Phillip Whelan and Oscar Peredo, ©Phillip Whelan.

WASap is an Apache module (version 1.3.x), which acts as an Application level Firewall. It can filter and block malignant requests.

Search:

Search:



This page is also available in the following languages:
| English |