b-wall-0.3.9 B-Wall may once become a fully working firewall toolkit. It now consists of a TIS fwtk compatible netperm-table parser, and a ck-gw proxy. FERM FERM is a tool to maintain complex firewalls, without having the trouble to rewrite the complex rules over and over again. FERM allows the entire firewall rule set to be stored in a separate file, and to be loaded with one command. The firewall configuration resembles structured programming-like language, which can contain levels and lists. Firestarter Firestarter is a complete firewall tool for Linux machines. Use the firewall creation wizard to create a basic firewall, then streamline it further using the powerful dynamic rules modifiers. Open and close ports with a few clicks, or stealth your services giving access only to a select few. Watch the real- time hit monitor as attackers probe your machine for open ports, in vain. Firestarter requires the GNOME 1.2 system libraries to be installed. fwlogwatch 0.0.26 fwlogwatch is a packet filter and firewall log analyzer with support for linux ipchains, netfilter/iptables and cisco log files. It also features incident report and realtime response capabilities. fwlogwatch 0.0.26 fwlogwatch is a packet filter and firewall log analyzer with support for linux ipchains, netfilter/iptables and cisco log files. It also features incident report and realtime response capabilities. gShield gShield is an iptables firewall for use with the 2.4.x series of the Linux kernel. ipfliter IP Filter is a TCP/IP packet filter, suitable for use in a firewall environment. To use, it can either be used as a loadable kernel module or incorporated into your UNIX kernel; use as a loadable kernel module where possible is highly recommended. Scripts are provided to install and patch system files, as required. ipfmeta ipfmeta is used to simplify the maintenance of your IPfilter ruleset. It does this through the use of 'objects'. A matching object gets replaced by its values at runtime. This is similar to what a macro processor like m4 does. -- Michael Ray http://www.cotse.com http://www.cotse.com/Packetderm/ The Church of the Swimming Elephant Have you gone to church today? Seattle firewall The Seattle firewall is an ipchains based firewall that can be used on a dedicated masquerading firewall machine (including LRP), a multi-function masquerade gateway/server or on a standalone Linux system. SYN Cookies Firewall SYN cookies is a technique to prevent SYN flooding attack. It was originated from D.J. Bernstein and Eric Schenk. Now SYN cookies is a standard part of Linux kernel. But the implementation in Linux now is aimed to protect the box only. The project here is to create a firewall feature in Linux, it can provide SYN cookies protection for whole net and all network operating systems. You can use this firewall to interdict half-open TCP connection, so the protected server will not enter half-open state (TCP_SYN_RECV). When the connection is fully established, the firewall relay the connection between the client and the server. Zorp Zorp is a new generation proxy firewall suite making it possible to finetune proxy decisions (with its built in script language), to fully analyze complex protocols (like SSH with several forwarded TCP connections), and to utilize outband authentication techniques (unlike common practices where proxy authentication had to be hacked into the protocol). Combined the power explained above, source code is provided under the GNU/GPL.