Search Results for "netfilter-layer7"

...Kubernetes defines many service constructs like cluster-ip, node-port, load-balancer etc for pod-to-pod, pod-to-service, and service from outside communication. All these services are provided by load balancers/proxies operating at Layer4/Layer7. Since Kubernetes's is highly modular, these services can be provided by different software modules. For example, kube-proxy is used by default to provide cluster-ip and node-port services.

netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance.

Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases.

HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that block external access, because have a hook to netfilter on kernel land(think like a second layer for firewall).

authfail is a tool for adding IP addresses of those who attempt to log into a system, causing authentication failures in auth.log, to an ACL. It reads data from auth.log in real time and adds the IP into netfilter with a DROP/REJECT policy.

Implementation of NAT66 (Stateless and Stateful) for Netfilter

A KDE-based wizard aimed at making the process of setting up a linux netfilter firewall easy, especially on distributions with no firewall tool of their own, such as slackware.

Though there is a ethernet bridge supported in Linux kernel, which is well supported and adheres netfilter architecture. This's my quest to add trans. layer connection management functionality, which facilitates application layer parers to register.

Netfilter extention to make filtering decisions based on Modbus/TCP headers, such as function code, unit id and reference number. Modbus/TCP is a widely used industrial ethernet protocol.

Netfilter tracker is a tracking tool for iptables logs, similar to Checkpoint(tm) Smartview Tracker. Includes storage in an embedded SQL database and a graphical application (viewer) to access filtered data.

Projekt sluzy do administracji ruterem pracujacym pod kontrola systemu Linux i wykonujacym NAT w malej sieci lokalnej. Adminstracja poprzez przegladarke WWW . Wymagania: serwer www apache z obsluga php, baza MySQL, pakiet netfilter z iptables.

A powerful netfilter log viewer.

iptgraph is a netfilter kernel patch that does iptable rules accounting. It has a web-based interface for displaying rrdtool graph statistics in order to help detect anomaly visually.

LPFW aims to be a personal firewall for Linux. It provides a KDE GUI for netfilter/iptables that lists/edits firewall rules, lists running processes, and lists connection attempts. Connection attempts can be accepted/dropped on the fly or permanently.

A collection of PHP scripts to manage a gateway server using Linux's Netfilter (iptables) & ISC's DHCPd v3. It allows mac address restriction and web-based configuration.

Alwis attempts to simplify the setup of a firewall (stateful packet filter) via the iptables tools. Alwis is a bash shellscript that generates (hopefully) sensible and secure rules for Netfilter based on a simple configuration file. Even though this is

Joseph is a management system for netfilter. Its aims are to seperate data from code, and to insulate the user from the underlying firewall architecture.