Search Results for "iptables"
Sort By:
Showing 348 open source projects for "iptables"
View related business solutions-
Gemini 3 and 200+ AI Models on One PlatformBuild generative AI apps with Vertex AI. Switch between models without switching platforms.
-
Try Google Cloud Risk-Free With $300 in CreditUse your credit across every product. Compute, storage, AI, analytics. When it runs out, 20+ products stay free. You only pay when you choose to.
-
1
UFW Docker
To fix the Docker and UFW security flaw without disabling iptables
UFW is a popular iptables front end on Ubuntu that makes it easy to manage firewall rules. But when Docker is installed, Docker bypasses the UFW rules and the published ports can be accessed from outside. Almost all of these solutions are similar. It requires disabling docker's iptables function first, but this also means that we give up docker's network management function. -
2
Kubernetes DNS
Kubernetes DNS service
This is the repository for Kubernetes DNS(kube-dns and nodelocaldns). Vulnerability patches are mainly for debian-base or debian-iptables images. They can be updated to the latest by modifying rules.mk and dnsmasq Makefile. -
3
FWiptables. Firewall With iptables.
iptables mini-script in file-wizard
The fwiptables is a one-file WIZARD, for IPTABLES with COMMAND-LINE, with CLI-MENU, with GUI-MENU, with GUI-ROLL, with GUI-SHELL. fwiptables develop with Purpose Educational Since 2020, developing code Since 2024, cleaning code Since 2025, fixing code Browse Wiki: https://sourceforge.net/p/f-iptables/wiki/browse_pages/ Anonymouse Ticket: https://sourceforge.net/p/f-iptables/tickets/ -
4
ShellCrash
Run sing-box/mihomo as client in shell
ShellCrash is a shell-based client runner for proxies like sing-box and mihomo, optimized for headless devices (e.g. OpenWrt routers). It provides scripted installation, automatic configuration reload, network port detection, and UI-less control via terminal. It simplifies running proxy services on embedded Linux devices. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
V2rayU
A tool to manage v2ray config json
V2ray multi-user management script, wizard-style management [new|delete|modify] transmission protocol, enjoy the fun of V2ray. Quickly view server connection information, general configuration modification. Freely change the transmission configuration. Upgrade command (keep the configuration file, if the upgrade fails, please install it completely). Call v2ray official api for traffic statistics. Multi-user, multi-port management , mixed transmission protocol management is no longer a dream.... -
6
Antrea
Kubernetes networking based on Open vSwitch
Antrea is a Kubernetes-native project that implements the Container Network Interface (CNI) and Kubernetes NetworkPolicy thereby providing network connectivity and security for pod workloads. Antrea extends the benefit of programmable networks from Open vSwitch (OVS) to Kubernetes. Antrea simplifies Kubernetes networking across differing clouds and operating systems with a unified network stack built atop Open vSwitch. Antrea is designed to ease deployment, operations and troubleshooting by... -
7
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently operates over IPv4 and does not yet support IPv6, meaning that users with IPv6 connectivity may bypass Tor routing. ... -
8
KUBEE ROUTER
Kube-router, a turnkey solution for Kubernetes networking
The Kube-router is a turnkey solution for Kubernetes networking with the aim to provide operational simplicity. Networking is hard as such. In a typical Kubernetes cluster, you would need to install multiple network components for various functionality. With many moving parts it makes Kubernetes networking even harder. Kube-router provides a cohesive yet lean and powerful alternative to several network components you would use. All this from a single DaemonSet/Binary. It doesn't get any... -
9
Tempesta FW
All-in-one solution for high performance web content delivery
...This is a drop-in-replacement for the whole web server frontend infrastructure: an HTTPS load balancer, a web accelerator, a DDoS mitigation system, and a web application firewall (WAF). Tempesta FW is the first and only hybrid of a Web accelerator and a multi-layer firewall. This unique architecture provides seamless integration with the Linux iptables or nftables. Tempesta FW services up to 1.8M HTTP requests per second on the cheapest hardware, which is x3 faster than Nginx or HAProxy. Tempesta TLS is about 40-80% faster than Nginx/OpenSSL and provides up to x4 lower latency. -
Application Monitoring That Won't Slow Your App DownFull APM with errors, performance, logs, and uptime monitoring. 99.999% uptime SLA on the platform itself.
-
10
fwknop
Single Packet Authorization, Port Knocking
fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter (fwknop supports iptables and firewalld on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD) and libpcap. SPA is essentially next-generation port knocking (more on this below). The design decisions that guide the development of fwknop can be found in the blog post "Single Packet Authorization: The fwknop Approach". -
11
SSHGuard
Intelligently block brute-force attacks by aggregating system logs
SSHGuard protects hosts from brute-force attacks against SSH and other services. It aggregates system logs and blocks repeat offenders using several firewall backends, including iptables, ipfw, and pf. -
12
ServerArk by wahke
Linux game server UDP flood analyzer and protector
...Es überwacht eingehende UDP-Pakete über libpcap in Echtzeit und erkennt Flood-Angriffe, die Lags verursachen oder Server zum Absturz bringen können. Verdächtige Pakete werden per iptables bereits auf Kernel-Ebene blockiert, bevor sie den eigentlichen Server erreichen. So bleibt der Game-Server auch unter starken Angriffen weitgehend spielbar, da nur legitimer Traffic bis zur Anwendung durchdringt. ServerArk kann interaktiv mit detaillierter Ausgabe oder unauffällig als Daemon mit täglichen Logdateien betrieben werden. -
13
OpenFW UTM Community is a "turn-key" , fork solutions Endian Firewall UTM Community, linux security distribution that makes your system a full featured security appliance with Unified Threat Management (UTM) functionalities. The software has been designed for the best usability: very easy to install, use and manage and still greatly flexible. The feature suite includes stateful packet inspection firewall, application-level proxy HTTP with antivirus support, content filtering of Web...
-
14
trafmon
Traffic Monitor for Linux based systems
trafmon (Traffic Monitor) gathers historical traffic statistics for Linux based systems. Data is taken from Netfilter/IPtables incoming and outgoing data packets stats. All the IP based information is organized and structured in a database (MySQL or SQlite3) in order to be seen into a web interface. -
15
...Manages the tor systemd service automatically (starts on enable, stops on disable). Transparent Proxy Intercepts ALL outbound TCP at the kernel level using iptables + redsocks. Catches tools that ignore environment variables entirely (nmap -sT, curl, wget, Metasploit, Nikto, sqlmap, most Python tools, etc.)
-
16
TheSSS (The Smallest Server Suite)
Lightweight Server Suite for LAN
...The supported servers are: FSP, FTP/SFTP, HTTP/HTTPS, NBD, NFS, NTP, rlogin, SSH, Telnet, and TFTP. A proxy server (Polipo) with Tor anonymizer is also included. The main security components are 4MLinux Firewall (based on iptables) and Clam AntiVirus. TheSSS iso images are fully compatible with UNetbootin, which can be used to create an easy-to-use TheSSS Live USB. -
17
Web-based Firewall Log Analyzer
Firewall log analyzer
Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc. -
18
IBlockator
Internet IP/CIDR Tables Blockator
Script downloads and applies automatically ipset & iptables rules to block several and big IP/CIDR lists. Designed for single host use -
19
pyGeneracioGeoIP
Generació regles IPTables per Continents o Països
...Entre altres opcions es poden realitzar les següents accions: - Permet llistar els continents existents als arxius de dades. - Permet fer llistat de països existents als arxius de dades.. - Permet fer llistat de IP per països. - Permet generar regles de tallafocs per IPTables i aplicar filtres de direccions IP. -
20
haoel.github.io
Comprehensive guide on self-hosting proxies, VPNs and transparent gate
This repository is a hands-on, longform guide for building and operating your own “scientific” Internet access setup — i.e., self-hosted proxies, VPNs, and transparent gateways — so you can reach blocked resources, protect privacy, and learn the underlying networking principles. It walks through buying and evaluating VPSes (regions, bandwidth, CN2/GIA lines), enabling kernel/network optimizations (BBR), and applying production practices like TLS certificates with Let’s Encrypt and using... -
21
HiddenWall
hidden firewall, custom firewall in kernel
HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that block external access, because have a hook to netfilter on kernel land(think like a second layer for firewall). My beginning purpose at this project is protect my personal server, now is protect the machines of my friends. When i talk "friends", i say peoples that don't know how to write low level code. ... -
22
Xtables-addons is a package that obsoletes the old patch-o-matic repository for the Linux kernel and iptables. Instead of patching the kernel source, extensions are built as modules and thus allow extending kernels without recompilation.
-
23
SIFT is an iptables firewall script generator. The output of SIFT can be used to run as the "/etc/init.d/iptables start" script on a GNU/Linux platform. SIFT configuration files are highly flexible because everything is written in Io.
-
24
An old KSH script to block SSH brute force attempts. Originally posted to seclists.org. (https://seclists.org/fulldisclosure/2005/Sep/27) The great-grandaddy of SSH tcpwrapper / iptables, supporting SSH blocking scripts. I have made a slight alteration to the script to secure it if anyone has the old original in circulation. It has clearly come to my attention that my work was never credited by other authors which is very disappointing. While my intention was to not continue to support this code actively after release, as I was donating it to the OS Community, I would have like to have been recognized by other authors in the OpenSource community, who sadly have also sought to profit from the idea. ...
-
25
Anti Iptables
# Anti Iptables re-branded GhostBSD-20-x64
This is Anti Iptables, an alternative to back-doored Systemd, Iptables, RHEL, Cent OS, Ubuntu, Debian, and the like. Anti Iptables is re-branded GhostBSD-20-x64.
