Search Results for "netfilter-layer7"

netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance.

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases.

HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that block external access, because have a hook to netfilter on kernel land(think like a second layer for firewall).

ipt-netflow is high performance NetFlow exporting module for Linux kernel (up to 4.15). Designed for Linux router in high-throughput network. This is netfilter/iptables module adding support for -j NETFLOW target. Designed to work efficiently w/o conntrack. Supporting NetFlow protocols v5, v9, and IPFIX. Accounting for IPv4, IPv6 traffic, and NAT translation events (NEL). Additional options is SNMP-index translation rules, aggregation rules, Ethernet type, MPLS, VLAN, and MAC addresses exporting.

upnpry is an upnp port opener for linux. It intercepts upnp port opening requests to routers and opens the corresponding ports on the linux box.

We implement an open source conflict resolution framework that consists of a user-space C application that automatically resolves firewall rules anomalies, and b) a generic tree (called policy tree), implemented as a Linux kernel module which maintains the resolved firewall rules and enables the necessary hooks to netfilter for matching incoming (or outgoing) network packets. Tree-based data structures offer improved efficiency compared to traditional access control lists (e.g. iptables or nftable maps), especially for large systems with a huge number of rules. Preliminary analysis from our implementation on ARM-based embedded systems examines efficiency and scalability of our framework. ...

...Contains the old sourcecode repository that is no longer maintained. Please see http://git.netfilter.org/ebtables/ and http://git.netfilter.org/arptables/ for the currently maintained repository (courtesy of the netfilter team).

IPv6 to IPv6 Address Mapping Linux Kernel Module: a netfilter extension that implements IPv6-to-IPv6 address mapping (stateless NAT66 as discussed by IETF). Maps a private IPv6 address range (ULA) to a public IPv6 address range e.g. on an IPv6 router

nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.

The PortKnocko project is composed of two parts: an iptables module (user space) and a netfilter module (kernel space). Both modules are used to implement the Port Knocking and SPA (Simple Packet Authentication).

create project netfilter/iptables

This Netfilter module implements the IVI translation algorithm. IVI is a stateless way to provide a bridge between the IPv6 world and the IPv4 world. More information here: http://datatracker.ietf.org/doc/rfc6219/ You need DNS64 to get this work

mod_layer7 is an application switching and load balancing module for Apache 2.2.x . This module utilizes mod_proxy, mod_deflate and mod_cache and contains embedded Perl interpreter that enables request rewriting and other interesting features.

iplist is a list based packet handler which uses the netfilter netlink-queue library (kernel 2.6.14 or later). It filters by IP-address and is optimized for thousands of IP-address ranges.

The Kernel Intrusion Detection System-KIDS, is a Network IDS, where the main part, packets grab/string match, is running at kernelspace, with a hook of Netfilter Framework. The project is not ready for use, then incomplete pieces of code may be found.

Brings the functionality of Linux netfilter to Windows.

pam_iptrecent is a PAM module that interfaces with the Netfilter/IPtables Recent module IP lists. This allows PAM authenticated sessions to add (and remove) IP addresses to firewall rules on linux servers.

The purpose of the Hi-Performance Protocol Identification Engine/HiPPIE is to analyze network traffic, and determine what protocol is in use within a given session based on packets sent to the engine. Linux kernel mod with support for iptables/netfilter

kclamav is a lite and streaming version of the ClamAV virus scanner. It is built as a Linux 2.6 kernel module and hooks via the Netfilter API. The ClamAV virus database is loaded into kernel memory.

FPGA based hardware card which implements above 4 giga bps network traffic throughput under affordable hardware cost. With linux driver and kernel patch, software based IPTables/netfilter firewall can be easily upgraded to a multi-giga high end firewall.

Linux Layer7 Switching project tend to provide a robust linux kernel framework to support high speed layer7 switching. It implements a kernel module engine and a userspace daemon to drive this low-level kernel engine. Switching decision is made userland.

A program that shows the current Linux 2.4 or 2.6 NAT table as well as TCP, UDP and ICMP states of NetFilter.

Interface for viewing netfilter log entries written to MySQL by Ulogd

Extension of the netfilter condition module to support condition setting via packet matching and condition un-setting via timeout.