Search Results for "iptables windows"
Sort By:
Showing 81 open source projects for "iptables windows"
View related business solutions-
Application Monitoring That Won't Slow Your App DownFull APM with errors, performance, logs, and uptime monitoring. 99.999% uptime SLA on the platform itself.
-
Auth0 B2B Essentials: SSO, MFA, and RBAC Built InAuth0's B2B Essentials plan gives you everything you need to ship secure multi-tenant apps. Unlimited orgs, enterprise SSO, RBAC, audit log streaming, and higher auth and API limits included. Add on M2M tokens, enterprise MFA, or additional SSO connections as you scale.
-
1
UFW Docker
To fix the Docker and UFW security flaw without disabling iptables
UFW is a popular iptables front end on Ubuntu that makes it easy to manage firewall rules. But when Docker is installed, Docker bypasses the UFW rules and the published ports can be accessed from outside. Almost all of these solutions are similar. It requires disabling docker's iptables function first, but this also means that we give up docker's network management function. This causes containers will not be able to access the external network. It is also mentioned in some articles that you... -
2
Kubernetes DNS
Kubernetes DNS service
This is the repository for Kubernetes DNS(kube-dns and nodelocaldns). Vulnerability patches are mainly for debian-base or debian-iptables images. They can be updated to the latest by modifying rules.mk and dnsmasq Makefile. -
3
ShellCrash
Run sing-box/mihomo as client in shell
ShellCrash is a shell-based client runner for proxies like sing-box and mihomo, optimized for headless devices (e.g. OpenWrt routers). It provides scripted installation, automatic configuration reload, network port detection, and UI-less control via terminal. It simplifies running proxy services on embedded Linux devices. -
4
Antrea
Kubernetes networking based on Open vSwitch
Antrea is a Kubernetes-native project that implements the Container Network Interface (CNI) and Kubernetes NetworkPolicy thereby providing network connectivity and security for pod workloads. Antrea extends the benefit of programmable networks from Open vSwitch (OVS) to Kubernetes. Antrea simplifies Kubernetes networking across differing clouds and operating systems with a unified network stack built atop Open vSwitch. Antrea is designed to ease deployment, operations and troubleshooting by... -
AI-generated apps that pass security reviewRetool lets you generate dashboards, admin panels, and workflows directly on your data. Type something like “Build me a revenue dashboard on my Stripe data” and get a working app with security, permissions, and compliance built in from day one. Whether on our cloud or self-hosted, create the internal software your team needs without compromising enterprise standards or control.
-
5
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently... -
6
KUBEE ROUTER
Kube-router, a turnkey solution for Kubernetes networking
The Kube-router is a turnkey solution for Kubernetes networking with the aim to provide operational simplicity. Networking is hard as such. In a typical Kubernetes cluster, you would need to install multiple network components for various functionality. With many moving parts it makes Kubernetes networking even harder. Kube-router provides a cohesive yet lean and powerful alternative to several network components you would use. All this from a single DaemonSet/Binary. It doesn't get any... -
7
Tempesta FW
All-in-one solution for high performance web content delivery
Tempesta FW is an all-in-one open-source solution for high performance web content delivery and advanced protection against DDoS and web attacks. This is a drop-in-replacement for the whole web server frontend infrastructure: an HTTPS load balancer, a web accelerator, a DDoS mitigation system, and a web application firewall (WAF). Tempesta FW is the first and only hybrid of a Web accelerator and a multi-layer firewall. This unique architecture provides seamless integration with the Linux... -
8
fwknop
Single Packet Authorization, Port Knocking
fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter (fwknop supports iptables and firewalld on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD) and libpcap. SPA is essentially next-generation port knocking (more on this below). The design decisions that guide the development of fwknop can be found in the blog post "Single Packet... -
9
OpenFW UTM Community is a "turn-key" , fork solutions Endian Firewall UTM Community, linux security distribution that makes your system a full featured security appliance with Unified Threat Management (UTM) functionalities. The software has been designed for the best usability: very easy to install, use and manage and still greatly flexible. The feature suite includes stateful packet inspection firewall, application-level proxy HTTP with antivirus support, content filtering of Web...
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
10
Kali-Proxy is a System-wide Proxy Manager for Kali Linux (XFCE) System Tray Icon Lives in the XFCE system tray. Right-click to access all options. Icon colours indicate current proxy state: White No proxy active Red SOCKS proxy active Purple Tor routing active Orange Transparent proxy active SOCKS4 / SOCKS5 Proxy Routes traffic through a SOCKS4 or SOCKS5 proxy of your choice. Configure host, port, and version...
-
11
TheSSS (The Smallest Server Suite)
Lightweight Server Suite for LAN
TheSSS (The Smallest Server Suite) is a lightweight server suite distributed as a live CD. It is designed for system administrators who need an extremely tiny and fast set of server software. The supported servers are: FSP, FTP/SFTP, HTTP/HTTPS, NBD, NFS, NTP, rlogin, SSH, Telnet, and TFTP. A proxy server (Polipo) with Tor anonymizer is also included. The main security components are 4MLinux Firewall (based on iptables) and Clam AntiVirus. TheSSS iso images are fully compatible with... -
12
Web-based Firewall Log Analyzer
Firewall log analyzer
Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. For Linux, FreeBSD, OpenBSD, Solaris, OSX,etc. -
13
haoel.github.io
Comprehensive guide on self-hosting proxies, VPNs and transparent gate
This repository is a hands-on, longform guide for building and operating your own “scientific” Internet access setup — i.e., self-hosted proxies, VPNs, and transparent gateways — so you can reach blocked resources, protect privacy, and learn the underlying networking principles. It walks through buying and evaluating VPSes (regions, bandwidth, CN2/GIA lines), enabling kernel/network optimizations (BBR), and applying production practices like TLS certificates with Let’s Encrypt and using... -
14
HiddenWall
hidden firewall, custom firewall in kernel
HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that block external access, because have a hook to netfilter on kernel land(think like a second layer for firewall). My beginning purpose at this project is protect my personal server, now is protect the... -
15
Anti Iptables
# Anti Iptables re-branded GhostBSD-20-x64
This is Anti Iptables, an alternative to back-doored Systemd, Iptables, RHEL, Cent OS, Ubuntu, Debian, and the like. Anti Iptables is re-branded GhostBSD-20-x64. -
16
TinyWall
Personal Linux firewall
Personal Linux firewall on bash, iptables and Zenity. Russian and English l10n. -
17
lxcm
Lightweight and secure container and firewall manager.
Simplified container management system with shared compressed templates, backups, firewall management, and secure defaults. -
18
allow22
Punch a temporary hole through your firewall to reach your network
When VPN isn't available and you need to get into your and your linux server. IP forwarding is turned on and port 22 bocked with IPtables. This is a bash script/CGI that if you know the URL and know the remote IP address where you are coming from, you can open a hole with iptables using a web browser and never have to login to the server. Then lock it back down when you are done. -
19
Octopussy
Open Source Log Management Solution
...Lot of Services already supported: Bind, Cisco Router, Cisco Switch, DenyAll Reverse Proxy, Drbd, F5 BigIP, Fortinet FW, IronPort MailServer, Linux Kernel/System, Linux IPTables, Monit, MySQL, Nagios, NetApp NetCache, Juniper Netscreen FW, Juniper Netscreen NSM, Postfix, PostgreSQL, Samhain, Snmpd, Squid, Sshd, Syslog-ng, Windows Snare Agent, Xen. Wizard to easily create new Messages/Service for Unrecognized logs. -
20
TorVM
A VM for using Tor
Preconfigured Debian Virtual Machine for use with Tor. Features: - Newest available tor version. - Iptables-script for tunneling all traffic through Tor. - Preconfigured MATE desktop environment. -
21
a Qt4 program for monitoring the syslog file for iptables style log events, then sending that info to the notify-osd system to be displayed in a desktop bubble.
-
22
obx
OBX Openbox & Xfce4 Desktop
An Arch Linux based desktop environment based on Openbox and Xfce4. Full customization of themes, icons, login manager and so on. A simplified installer, compliments of the PacBang installer, written by Carl Duff. -
23
Comcast
Simulating bad network connections so you can build better systems
...It works by wrapping up some system tools in a portable(ish) way. On BSD-derived systems such as OSX, we use tools like ipfw and pfctl to inject failure. On Linux, we use iptables and tc. Comcast is merely a thin wrapper around these controls. Windows support may be possible with wipfw or even the native network stack, but this has not yet been implemented in Comcast and may be at a later date. On Linux, Comcast supports several options: device, latency, target/default bandwidth, packet loss, protocol, and port number. -
24
Bocker
Docker implemented in around 100 lines of bash
Bocker is a minimal, educational reimplementation of core container (Docker-like) functionality, done in about a hundred lines of Bash script. Its purpose is not to replace Docker’s full feature set, but to illustrate container primitives—namespaces, cgroups, layering, filesystem manipulation, network namespaces, etc.—in a transparent, minimal form. With bocker you can perform basic operations such as pulling an image, running a container, exec into a container, listing containers, and... -
25
iptables-cb
Scripted service managing iptable blocks by ISO
This SysV and systemd service manages / maintains blocks of IP address ranges by country code using publicly available / published IP ranges assigned by country. Configuration is managed through a simple file listing ISO codes of countries to block in /etc/sysconfig much as any other service. Includes optimizations using ipset and leverage of a tree hierarchy in the generated iptables rules to ensure minimal performance impact on higher network traffic volumes.
