netfilter

There are 7 repositories under netfilter topic.

x-way / iptables-tracer
Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
iptables-tracer iptables nflog golang netfilter
Language:Go 245
vel21ripn / nDPI
Open Source Deep Packet Inspection Software Toolkit
linux netfilter ndpi iptables
Language:C 118
AliDbg / IPBAN
⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset
block blocked fail2ban firewall geoip ipban ipset iptables ufw ip gfw xt-geoip netfilter persistent rules blacklist country linux nginx maxmind
Language:Shell 113
geo-nft
wirefalls / geo-nft
Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.
nftables nftables-geoip netfilter firewalls firewall-rules firewall-configuration linux-security linux-server geoip-database nftables-rules geo-ip geoip-location ransomware-prevention malware-protection phishing-protection ddos-mitigation anti-malware ddos-protection anti-phishing ip-geolocation
Language:Shell 113
dxwu / BinderFilter
A Linux kernel IPC firewall and logger for Android and Binder
android binder ipc-message kernel netfilter
Language:Python 109
landhb / DrawBridge
Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)
bpf linux-kernel netfilter iptables-extension iptables port-knocking rust port-knocker port-knock knocker
Language:C 109
ti-mo / conntrack
Pure-Go Conntrack implementation; for humans.
golang-library netlink conntrack netfilter hacktoberfest
Language:Go 107
ntop / ipt_geofence
Geographical host protection for Linux/FreeBSD
netfilter cybersecurity linux firewall
Language:C++ 101
antiddos
yuk1c / antiddos
A very simple script that uses special iptables rules and sysctl tweaks that protects your server(s) against many different network attacks.
antiddos ddos-defense ddos-protection firewall iptables linux anti-ddos anti-ddos-protection anti-ddos-script ddos-mitigation layer4 attack security netfilter
Language:Shell 98
rpthms / nft-geo-filter
Allow/deny traffic in nftables using country specific IP blocks
nftables blacklist netfilter geo-ip ip-blacklist nft-blacklist blacklist-sets ip-geolocation whitelists-ip ip-whitelist
Language:Python 93
borestad / blocklist-abuseipdb
Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~100% confidence)
abuseipdb blocklist blocklists ipblocklist ipset malware iplist iplists blacklist blacklists ipsum ipset-lists ipsets attack-prevention attacks firewall iptables maltrail blocklist-ip netfilter
Language:Shell 86
yaa110 / rust-iptables
Rust bindings for iptables
bindings iptables netfilter rust rust-crate
Language:Rust 81
milesrichardson / docker-nfqueue-scapy
Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)
docker iptables netfilter nfqueue python scapy
Language:Python 79
ti-mo / netfilter
Pure-Go Netfilter Netlink family implementation.
golang-library netlink netfilter hacktoberfest
Language:Go 68
florianl / go-nfqueue
c-binding free API for golang to communicate with the queue subsystem of netfilter
golang hacktoberfest netfilter nfqueue
Language:Go 67
florianl / go-nflog
c-binding free API for golang to communicate with the log subsystem of netfilter
netfilter nflog golang kernel hacktoberfest
Language:Go 58
jwkohnen / conntrack-stats-exporter
Netfilter Conntrack Stats Exporter
prometheus-exporter netfilter conntrack kubernetes networking
Language:Go 57
Sina-Ghaderi / goshkan
Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control
proxy-server tls-proxy http-proxy sni-proxy 65535-ports iptables netfilter regexp regex-filters regex-match mysql proxy go
Language:Go 57
TeaInside / teavpn2
TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).
network tunnel vpn vpn-server vpn-client linux netfilter tor-network hacktoberfest
Language:C 52
regit / opensvp
Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.
python security testing network scapy netfilter
Language:Python 49
yuuki / lsconntrack
The Linux netfilter conntrack-based connection flows pretty printer.
conntrack go linux netfilter tcp
Language:Go 41
DAchilles / Netfilter-Firewall
华中科技大学2021网络安全课程设计（基于netfilter的状态检测防火墙）
hust netfilter firewall
Language:C 38
Pwnzer0tt1 / firegex
Firegex is an application firewall created for CTF Attack-Defence competitions by Pwnzer0tt1
application-firewall attack-defense ctf firewall intrusion-detection netfilter netfilter-queue nftables reverse-proxy firegex
Language:Python 33
ashishraste / arp-dns-attacks
ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library
linux c network-attacks netfilter-hook netfilter packet-capture pcap-library packet-sniffer http dns arp-poisoning
Language:C 31
eiginn / nftrace
Easier tracing of packets through iptables
iptables netfilter firewall tracing linux-networking
Language:Go 31
freeyoung / netfilter-persistent-plugin-ipset
A plugin of netfilter-persistent in debian/ubuntu to make ipset rules persistent, especially on reboot.
ipset netfilter netfilter-persistent iptables-persistent
Language:Shell 27
dev2lead / uppersafe-osfw
UPPERSAFE Open Source Firewall
dns firewall iptables netfilter python security unbound
Language:Python 22
juli3nk / go-netfilter
Go implentation for Iptables
go golang netfilter iptables
Language:Go 17
Ty-Chen / NAT
NAT type configuration and switch
iptables nat nat-configuration netfilter
Language:C 17
jchavanton / disruptor
generating problems on RTP streams : latency, delay, jitter
networking simulator latency jitter packet loss c netfilter disruptor
Language:C 15
secynic / nfsinkhole
nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).
networking network iptables firewalld sinkhole linux syslog rsyslog syslog-ng tcpdump service systemd netfilter bsd-license
Language:Python 13
iamhyc / Netfilter-L4-Encryption
An encryption trial with AES-128 on Linux kernel subsystem Netfilter
netfilter netlink aes-256
Language:C 12
mostafa / iptables_book
Netfilter iptables on IPv4 & IPv6, 1st Edition: It's a collaborative book on Netfilter iptables and its programming.
iptables netfilter book
11
mohitrajain / raswall
A Network access firewall for Unix like OS and specifically supports Raspberry Pi 3 .
iptables netfilter network-security squid clamav proxy-server firewall captive-portal python nodejs mongodb packet-parsing raspberry-pi-3 dhcp-server antivirus
Language:JavaScript 10
gamemann / Test-Kernel-Modules
A repository used to store my test Linux kernel modules I make while I'm learning.
kernel linux module netfilter examples net forward packet processing
Language:C 9
t-ho / dmz-netfilter
DMZ design using Linux netfilter
dmz netfilter iptables bash shell-script firewall
Language:Shell 9

netfilter

x-way / iptables-tracer

vel21ripn / nDPI

AliDbg / IPBAN

wirefalls / geo-nft

dxwu / BinderFilter

landhb / DrawBridge

ti-mo / conntrack

ntop / ipt_geofence

yuk1c / antiddos

rpthms / nft-geo-filter

borestad / blocklist-abuseipdb

yaa110 / rust-iptables

milesrichardson / docker-nfqueue-scapy

ti-mo / netfilter

florianl / go-nfqueue

florianl / go-nflog

jwkohnen / conntrack-stats-exporter

Sina-Ghaderi / goshkan

TeaInside / teavpn2

regit / opensvp

yuuki / lsconntrack

DAchilles / Netfilter-Firewall

Pwnzer0tt1 / firegex

ashishraste / arp-dns-attacks

eiginn / nftrace

freeyoung / netfilter-persistent-plugin-ipset

dev2lead / uppersafe-osfw

juli3nk / go-netfilter

Ty-Chen / NAT

jchavanton / disruptor

secynic / nfsinkhole

iamhyc / Netfilter-L4-Encryption

mostafa / iptables_book

mohitrajain / raswall

gamemann / Test-Kernel-Modules

t-ho / dmz-netfilter