Open Source BSD Firewall Software - Page 4

Bait and Switch combines IDS tech (Snort primarily) and Honeypots into a new, more valuable, reactive system. After receiving an alert, B&S protects your server by silently redirecting hostile traffic to a honeypot while leaving other traffic alone.

Bandwidth Management Tools is a total bandwidth management solution for Linux and can be used for firewalling, traffic graphing, and shaping. It is not based on any currently-available bandwidth management software some ver advanced features.

Web-based bandwidth management tools based on tc and iptables for internet cafe or small to medium network administrators.

BastionX is a suite of bash scripts which provide a firewall system using netfilter on linux. Some of the supported features are flow control & QoS, local & WAN ip blacklists, dynamic trusted hosts, DMZ feature, auto detection of interfaces.

It moves by itself inside networks like virus infection & plagues, it is being written to solve computer virus problem drastically and responsibly. It is legal, free and open for public domain to improve W3 ICT Security.

BlockSSHD protects computers from SSH brute force attacks by dynamically blocking IP addresses by adding iptables rules.

Bruteblock allows system administrators to block various bruteforce attacks on UNIX services. The program analyzes system logs and adds attacker's IP into IPFW table effectively blocking them. Addresses are removed from the table after expiration period

These three tools build Checkpoint, Cisco ASA or Netscreen policys from logfiles. They write dbedit, access-list or set address, set service and set policy commands for the traffic seen in the logs, that can be cut and pasted into the firewalls. WOOT

Bunny Proxy is a light web proxy for across filtering.

CACANMS is an acronym for Computer Aided Campus Area Network Management System. The system consists of software components and a library of about 60 classes. It is divided into three types of subsystems which reside on different servers and communicate.

CD-ROM Firewall is a Red Hat/Centos (yum based install) based firewall that boots off a CD-ROM. Utilizing a headless, diskless computer it can provide services such as network address translation (NAT), virtual private network (VPN), ADSL connnectivity,

Provide secure, quality, user-friendly and fail-proof access to internet manager for IPTABLES-DENY-ALL-based Linux configuration of firewall, including traffic and time accounting, logging, auto-disconnection. Software for i-net clubs and caffee admins

Capra is a Open Source tool to quickly get some nice and useful reports out off your Watchguard Fireware log files.

CartoReso intends to facilitate enterprise computer network mapping.

This tools help you migrating existing Checkpoint Firewall 1 Installation and Rulesets to Linux or *BSD based Firewall. This is done by converting the Rulebase- and the Objects- Database from Checkpoint to the FirewallBuilder XML Format.

CompactBSD is a powerful set of tools that allow you to build your own customized, lightweight distribution of OpenBSD and then burn it onto compact flash so that it can be run on an embedded PC platform such as FatPort's FatPoint (www.fatport.com)

The library implements generic content inspection protocol API compatible with Sendmail Milter, thus allowing various applications and proxies to use Milter-compatible filters without running sendmail itself. It is here to replace Checkpoint\'s OPSEC/CV

The aim of context filter is to provide a strong mechanism for checking network flow on the fly in complement of Packet Filter or IP Filter on a FreeBSD operating system.

Coraza is an open-source, enterprise-grade, high-performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set. Coraza is a drop-in alternative to replace the soon-to-be abandoned Trustwave ModSecurity Engine and supports industry-standard SecLang rule sets. Coraza runs the OWASP Core Rule Set (CRS) to protect your web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. CRS protects from many common attack categories including: SQL Injection (SQLi), Cross Site Scripting (XSS), PHP & Java Code Injection, HTTPoxy, Shellshock, Scripting/Scanner/Bot Detection & Metadata & Error Leakages. Coraza is a library at its core, with many integrations to deploy on-premise Web Application Firewall instances.

Crowd Control is an small, cross-platform HTTP proxy (a fork of the elhttp project) designed for systems with little RAM, such as a home router. It can filter URLs using SquidGuard blocklists, and has the unique ability to filter HTTPS domains as well.

DAXFi is a Python package that helps configure several different kinds of firewalls in a consistent way. The rules are described in XML. It comes with a Python package, useful to build other applications and includes some useful example programs.

The DMOZ white/blacklist generator is a Perl script to convert the RDF download file from the DMOZ website into one or more whitelists compatible with the SquidGuard and Dan's Guardian web content filters.

Dave's Naughty Stuff Blocker. This is an open source solution to allow administrators to filter and redirect selected "inappropriate" sites based on a list of specific sites and/or strings.

DNS multiplexer. It redirect, send hostname labels, access or denied DNS packet by hostname.

The Distributed Intrusion Detection System.