Open Source Unix Shell Firewall Software

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

Those who have read past the "Malware" warning can be assured there is absolutely no malware in this OS or in the download. This warning comes from the "netcat" binary included in the download as a DOS time client. Unfortunately netcat has code that is flagged as malware. FREESCO, a NAT/firewall router/server based on Linux and runs on a single 1.44MB floppy. Freesco is very powerful and versatile and can connect multiple home or small office networks to most types of Internet connections including dialup.

BBStatus is an IP accounting and an SNMP and IP monitoring tool for Linux. It collects, summarizes, and displays the values from its database.

Bait and Switch combines IDS tech (Snort primarily) and Honeypots into a new, more valuable, reactive system. After receiving an alert, B&S protects your server by silently redirecting hostile traffic to a honeypot while leaving other traffic alone.

CD-ROM Firewall is a Red Hat/Centos (yum based install) based firewall that boots off a CD-ROM. Utilizing a headless, diskless computer it can provide services such as network address translation (NAT), virtual private network (VPN), ADSL connnectivity,

Firewall and Security solutions for your Cobalt Servers. Tired of being port scanned? Sick of foreign hackers installing root kits? Come check it out.

Green Screen: A Linux based Advanced Syslog Server for Juniper NetScreen Firewalls - Can be expanded later to support other products. It can capture syslog messages, parse them, store them in a MySQL database. A Web GUI interface is also included.

Smoothwall Mod for Dansguardian User group editing. Creates five initial groups; everybody, child, preteen, teen and adult. Intended to automated the editing of filtergroupslist and exceptionuserlist via the web interface of Smoothwall. Inserts as a new

IPFWstats is a suite of shell, perl and PHP scripts to count network traffic on a per user basis on a server using the FreeBSD IPFW firewall. Statistics are imported into a MySQL database daily and can then be viewed using a PHP script in a web browser

IceIDS is heuristic Network Intrusion Detection System (NIDS) based on calculating Student's distributions of network traffic.

Mini OpenBSD Router/Firewall/Gateway with openssh, altqd, pfctl (firewall+nat), routed, snmpd, oidentd, simple shell menu config,multi user & wireless support. Fit on 8MB flashdisk & 24 MB ram.

Easily turn a Ubuntu-based computer into a full linux router, complete with dhcpd, named/bind, iptables firewall, and packet inspection of the network traffic being routed. Deep packet inspection for layer 2 (mac), layer 3 (ipv4, ipv6), layer 4 (icmp, tcp, udp), and layer 7 (application-specific). Summary of network flows and all layers of inspected traffic is stored in a database at 1-second intervals. This database is then mined to drive the Apache/PHP web interface.

The p2p_grab script will make a log which is useful to generate an IP list. This list is inserted in cbq to shape the bandwidth for the users that use P2P programs. Also the IP list can be inserted in an iptables firewall script...

Simple Iptables Firewall

This is an NIDS/HIDS, Network plus Host based Intrusion Detection System. Este é um NIDS / HIDS, Sistema de Detecção de Invasões Baseado em Redes e em Máquinas.

The Plague provides a web UI to a MySQL db of parsed syslog data. The focus has been security reporting. The logs supported (so far) are NetScreen firewalls, Cisco routers and switches and PIXen, Gauntlet firewalls.

This package contains completions for conntrack, conntrackd and nfct.

deface-no-tnx is an anti-defacement system that monitors your Web files and notifies you about unallowed changes. It also replaces the defaced page with a standard "error" page,so that no offensive/joking content can be frauodolently added to your site

ipset_list is a wrapper script for listing sets of the netfilter ipset program. It allows you to match and display sets, headers, and elements in various ways. The result can be saved as shell script and in ipset save, or xml format.

netadm project provides monitoring tools for network performance and network control system. the above monitoring tool is called 'npt(Network Perfermance Tool) and the above network control system is called 'gwc (GateWay Control~). npt program provide

Distribution for CABLE ISP with a builting network managment suite optimized for ethernet users. Distro based on Slackware. The Network management suite has features of bandwidth accounting, traffic control, network diagnostics, IP to MAC binding etc.

iptables based port (service) traffic counter with accounting capabilities