netfilter

Tool to generate a Linux kernel module for custom rules with Netfilter hooking. (block ports, Hidden mode, firewall functions)

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Open Source Deep Packet Inspection Software Toolkit

A Linux kernel IPC firewall and logger for Android and Binder

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

Pure-Go Conntrack implementation; for humans.

Rust bindings for iptables

Allow/deny traffic in nftables using country specific IP blocks

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

A good addition to your conntrack-tools package. Conntracker acts like a firewall sniffer, it analysis, realtime, with very low overhead, all iptables (or nf_tables) existing flows and inform you, at the very end of its execution, all flows in a sorted and consumable way.

Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.

Pure-Go Netfilter Netlink family implementation.

TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).

Netfilter Conntrack Stats Exporter

c-binding free API for golang to communicate with the log subsystem of netfilter

c-binding free API for golang to communicate with the queue subsystem of netfilter

Geographical host protection for Linux

The Linux netfilter conntrack-based connection flows pretty printer.

Easier tracing of packets through iptables

ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library

UPPERSAFE Open Source Firewall

Go implentation for Iptables

nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).

generating problems on RTP streams : latency, delay, jitter

An encryption trial with AES-128 on Linux kernel subsystem Netfilter

NAT type configuration and switch

Netfilter iptables on IPv4 & IPv6, 1st Edition: It's a collaborative book on Netfilter iptables and its programming.

A Network access firewall for Unix like OS and specifically supports Raspberry Pi 3 .

Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control