Open Source Deep Packet Inspection Software Toolkit

A Linux kernel IPC firewall and logger for Android and Binder

Pure-Go Conntrack implementation; for humans.

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

Advanced HTTP Rewriting Tool

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Rust bindings for iptables

c-binding free API for golang to communicate with the queue subsystem of netfilter

Simple script against most network threats.

Allow/deny traffic in nftables using country specific IP blocks

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

c-binding free API for golang to communicate with the log subsystem of netfilter

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

Geographical host protection for Linux/FreeBSD

Pure-Go Netfilter Netlink family implementation.

ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library

Netfilter Conntrack Stats Exporter

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).

Firegex, a firewall for Attack-Defense CTFs