Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

🛠 Reproduce and fix OpenWrt 24.10.0 flow offload bug causing NAT policy routing to misroute traffic to wrong LAN MAC addresses.

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

Robust ISP IPSET manager for dynamic customer access control, integrating billing states with Linux Netfilter/ipset.

iptables rules to shut off undesired connection and clients from certain geos

iptables/netfilter firewall for Linux servers with stateful filtering, trust system, ipset block lists, SYN flood protection, VNET per-IP policies, and Docker support

Simple script against most network threats.

Reproducer and mitigation for OpenWrt 24.10.0 flow offload + PBR + NAT wrong-MAC bug (netns lab, diagnostics, firewall4 guard).

OpenWrt helper scripts to set IPv4 TTL / IPv6 HopLimit via fw4 nftables snippets

A user-friendly, colorful, and fully-featured Bash script for managing a transparent Tor proxy on Linux. Includes status reporting, DNS redirection via dnsmasq, IPv6 blocking, Tor ControlPort integration, IP renewal, and easy start/stop/restart commands.

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Firewall wrapper that blocks traffic to IP addresses of AS networks.

A Netfilter configuration setup script template

PUBLIC | Faculdade de Ciências e Tecnologia da Universidade de Coimbra (FCTUC) - Mestrado em Engenharia Informática (MEI) - Percurso: Engenharia de Software - 2022/2023 | Segurança em Tecnologias da Informação (STI) - Projetos: OpenVPN; X.509 certificates; IPTables/Netfilter; Snort; WSTG; ModSecurity; WAF.

📨 an iptables firewall loader. initialized via systemd

DDOS Watchdog

This is my router image. It's controls my entire home network. It's automatically manage network due to some network connection errors occurred and also bypass some speed limits and limitations.

DMZ design using Linux netfilter

nftables persistent scripts to save, flush and load rulesets from permanent storage