Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

🛠 Reproduce and fix OpenWrt 24.10.0 flow offload bug causing NAT policy routing to misroute traffic to wrong LAN MAC addresses.

📊 Generate and display real-time flowcharts and diagrams in your browser using Claude AI and Excalidraw integration.

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Simple script against most network threats.

Advanced HTTP(S) Rewriting Proxy

Containerised Scapy environment with a Terminal for interactive packet analysis, network automation, and visualisation. For Docker and Kubernetes deployments

Open Source Deep Packet Inspection Software Toolkit

Kernel-level rootkit targeting Linux's Pluggable Authentication Modules (Linux-PAM)

Conntrack entry removal daemon

Netfilter Firewall GUI

c-binding free API for golang to communicate with the log subsystem of netfilter

c-binding free API for golang to communicate with the queue subsystem of netfilter

Netfilter Conntrack Stats Exporter

iptables/netfilter firewall for Linux servers with stateful filtering, trust system, ipset block lists, SYN flood protection, VNET per-IP policies, and Docker support

User-space WireGuard traffic obfuscator for DPI/ML evasion, using NFQUEUE + ChaCha. Fast, lightweight, and container-ready.

Malware.Expert Firewall (MEF) - Lightweight Linux firewall and Fail2Ban & CSF alternative with nftables/iptables support.

Reproducer and mitigation for OpenWrt 24.10.0 flow offload + PBR + NAT wrong-MAC bug (netns lab, diagnostics, firewall4 guard).

Convert iptable-save to visualized graph. txt(iptables-save) -> svg(graphviz(dot))