軟體列表

The traffic shaper is a sophisticated but
easy-to-use shell script for throttling or
granting a certain bandwidth to certain
connections. Additionally, it implements an
easy-to-configure packet filter. Both parts are
based on facilities provided by the Linux 2.4
kernel (iproute2 for the traffic shaper and
netfilter with IPTables for the packet filter).
The packet filter offers independent SYN/ACK
check, and stateful and log rules for each
configured rule.

MODU is a Linux-oriented textual dialup toolkit
with support for MS callback and iptables. It is
intended to be flexible enough to dialup to many
ISPs without much configuration.

myNetWatchman Perl Agent is a client for
myNetWatchman.com. This program is designed to
capture rejected packet information from various
firewall logs and forward this attack information to
central analysis servers at myNetWatchman.com,
which then analyze events and escalate to the
provider of the source.

Program Guard allows the user of a Linux
workstation to specify which applications are
allowed to make TCP/IP connections to the
Internet. Application program names can be
specified by listing them in a file (Static Mode)
or by querying the user (Query Mode). In Query
Mode, connection attempts by unknown programs
result in a Program Guard dialog box being
displayed. In addition to providing connection
information, this gives the workstation user the
option of allowing or blocking the program either
for the current instance of the program or for all
future instances. It consists of a daemon, a
kernel module, and a GUI interface component and
makes use of the Linux Netfilter interface.

If you ever noticed how your SSH/gaming sessions become sluggish when you start downloading something, or how your downloads slow down when you start uploading, and your broadband link is managed by a Linux router/gateway, then you could benefit from using CTShaper. CTShaper reduces link latency by reducing queueing on your side and on your ISP's side. Additionally, it sets up four traffic queues with different priorities and (configurable) flow rates.

ROPE is an open-ended iptables match module that allows
rules to be written using a simple but powerful scripting
language. It is designed for controlling complex high-level
protocols that cannot be blocked using traditional criteria
based on port numbers (etc.). Criteria can include tests on
any field of the IP, UDP, or TCP headers as well as the
packet data payload.

LibIPTables is a simple C API for adding, removing, viewing, backing up, and restoring iptables rules programmatically.

Firekeeper is an intrusion detection and
prevention system for Firefox. It is able to
detect, block and warn the user about malicious
sites. Firekeeper uses flexible rules similar to
Snort ones to describe browser-based attack
attempts. Rules can also be used to effectively
filter different kinds of unwanted content.

MasarLabs NoArp is a Linux kernel module that filters and drops
unwanted ARP requests. It is useful when you need to add an alias to
the loopback interface to use a load balancer.

nstreams is a program that analyzes the networks streams occuring on a network and prints them in a human readable form. This is useful when you want to set up a firewall but do not know your needs/the needs of your customers. nstreams can read tcpdump output files or directly listen on a given interface, and may even produce ipchains (Linux) or ipfw (BSD) firewall rules instead of printing the streams, letting you build your firewall automagically.

Pyroman is a firewall config tool for complex
networks. By using iptables-restore, it's much
faster than other tools in configuring the
firewall, the configuration is simple, and it has
accurate error reporting and offers rollback of
changes.

The SunGazer PacketFilter is a small and simple tool to set up firewall rules. It uses iptables and is easy to use and to configure.

IP Tables network magic SysRq is a Linux iptables target that
allows to do the same as the magic SysRq key on a keyboard
does, but over the network. It includes syncing disks,
remounting them read-only, rebooting the machine, etc.

FrazierWall Linux is a single floppy distribution Linux firewall that is based on the Linux Router Project. It is designed for use with ethernet base internet connections (such as cable modems or xDSL lines). It allows you to share such a connection with several other computers on a LAN. It is easy to setup and maintain, and is available in a Linux configurable software version.