Open Source Windows Firewall Software

PeerGuardian is a privacy oriented firewall application. It blocks connections to and from hosts specified in huge blocklists (thousands or millions of IP ranges). Its origin seeds in targeting aggressive IPs while you use P2P. PeerGuardian Linux: Not developed actively anymore. Team might still be around. Some unreleased changes on git. Outdated technology. Peerguardian OS X: Not developed anymore. We've lost contact with the OS X developer. PeerGuardian Windows: Not developed anymore. It's highly recommended to use PeerBlock instead, which is a continuation of PeerGuardian's development in Windows, with bug fixes and support for Windows Vista and Windows 7. Collaboration with peerblock.com is welcome! PeerGuardian is an open project. Not only is its source code open for you to read, use, and modify - but the project is open for you to join and contribute in any form (code, documentation, bug reports, web and support).

Enables tunneling of network connections through restrictive HTTP proxies. Features: Portmapping, SOCKS4, SOCKS5, web-based admin interface, possibility to use standalone server (perl) or hosted server (PHP), optional authorization from LDAP or MySQL

Windows Port Knocking. A Windows implementation of port knocking developed to work alongside an existing firewall (the free CHX-I Packet Filter v3.0).

A utility for detecting and resisting BIDIRECTIONAL ARP spoofing. It can anti-spoof for not only the local host, but also other hosts in the same subnet. It is as well a handy helper for gateways which don't work well with ARP.

Knocker is a simple, versatile, and easy-to-use TCP security port scanner written in C, using threads. It is able to analyze hosts and the network services which are running on them. It is available for Linux, FreeBSD, Unix, and Windows95/98/2000.

Only for windows XP OpenFirewall is based on two lines of defence first WIPFW ( Kernel-mode driver ) and second tdifw ( application-mode TDI-driver ) . Is a Windows firewall easy to use like the commercial products

iSafer firewall is used to protected your PC against spywares, spamwares. It is also a good example for software developers to understand the basic knowledge about firewall. NOTE: Visit http://isafer.sourceforge.net to see more...

Bootable CD Forensics/Virus Scanning/Recovery/PenTesting platform

360-FAAR (Firewall Analysis Audit and Repair) is an offline, command line, firewall policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in Checkpoint dbedit, Cisco ASA or ScreenOS commands, and its one file! Read Policy and Logs for: Checkpoint FW1 (in odumper.csv / logexport format), Netscreen ScreenOS (in get config / syslog format), Cisco ASA (show run / syslog format), 360-FAAR compares firewall policies and uses CIDR and text filters to split rulebases / policies into target sections and identify connectivity for further analysis. 360-FAAR supports, policy to log association, object translation, rulebase reordering and simplification, rule moves and duplicate matching automatically. Allowing you to move rules to where you need them. Build new rulebases from scratch with a single 'any' rule and log files, with the 'res' and 'name' options. Switch into DROPS mode to analyse drop log entries.

WinFail2ban scans log files/event viewer and bans IP that makes too many password failures.

Enable servers behind a firewall to export services to the external networks with the assistance from an externel host as proxy (Jumppoint). The firewall tunnel consists of two parts: a frontend as "Jumppoint" and a backend running behind the firewall

Malware-Blocker blocks communication from your computer to any server that is known to be a malicious one. It does that by replacing your HOSTS file (deep inside Windows directory) with a blacklist of malicious servers, which are redirected to 0.0.0.0

A windows c++ program to test various libraries on various routers to forward ports on routers.

Simple TDI-Based Open Source Personal Firewall for Windows NT4/2000/XP/2003

Enables access to SSH Shell and File Transfer services using a web browser. Java Servlet application uses pure HTML to provide access to SSH services.

AAFW(AntiAttackFireWall) is an isapi to protect IIS 5/6 from SQL injection.

Reduce employee personal Internet usage during the working day. Increase respect of your corporate Internet usage policy, provide open and honest feedback such as WebMail use during work hours. Plugs into an existing proxy or firewall such as Squid.

Auto Proxy Filter Test (APFT) automates the testing of safe and unsafe URLs against a content filtering proxy (such as Dansguardian) and helps prevent regressions. APFT is useful to people who are designing filter rules.

Implements a Windows NT VPN peer to Olaf Titz's CIPE VPN for Linux NOTE: The distribution must be downloaded from the home page

CallingHome is a small tool that allows you to gain control over a firewalled and thus directly unreachable PC (e.g. your PC at work). It achieves this by actively maintaining a SSH connection from within the firewall to a SSH server of your choice.

Capra is a Open Source tool to quickly get some nice and useful reports out off your Watchguard Fireware log files.

The Cisco Connection Analyzer will analyze a real time snap shot of your PIX/ASA connection table and tell you useful information about the conn table. It will tell you top talkers, top services..etc. Very useful in troubleshooting the firewall.

The EmailWebBrowser allows users to request and receive web pages through email, even those that would be normally blocked by the user's network.

Server/client suite which provides per-user access control/firewall/QOS. Robust and high speed implementation is secure against MAC/IP spoofing, and can scale to large networks with many clients. Options for additional monitoring and captive portal.

We launched the Firedraw project in order to make a free graphical interface for the Linux Firewall Netfilter(iptables, Kernel 2.4).