netfilter

There are 9 repositories under netfilter topic.

borestad / blocklist-abuseipdb
Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)
abuseipdb blocklist blocklists ipblocklist ipset malware iplist iplists blacklist blacklists ipsum ipset-lists ipsets attack-prevention attacks firewall iptables maltrail netfilter
Language:Shell 352
x-way / iptables-tracer
Insert trace-points into the running configuration to observe the path of packets through the iptables chains.
iptables-tracer iptables nflog golang netfilter
Language:Go 280
AliDbg / IPBAN
⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset
block blocked fail2ban firewall geoip ipban ipset iptables ufw ip gfw xt-geoip netfilter persistent rules blacklist country linux nginx maxmind
Language:Shell 148
ti-mo / conntrack
Pure-Go Conntrack implementation; for humans.
golang-library netlink conntrack netfilter hacktoberfest
Language:Go 141
dxwu / BinderFilter
A Linux kernel IPC firewall and logger for Android and Binder
android binder kernel ipc-message netfilter
Language:Python 139
antiddos
mintyYuki / antiddos
Simple script against most network threats.
antiddos ddos-defense ddos-protection firewall linux anti-ddos anti-ddos-protection anti-ddos-script ddos-mitigation layer4 attack security netfilter nftables
Language:Shell 132
vel21ripn / nDPI
Open Source Deep Packet Inspection Software Toolkit
linux netfilter ndpi iptables
Language:C 128
ntop / ipt_geofence
Geographical host protection for Linux/FreeBSD
cybersecurity firewall linux netfilter
Language:C++ 124
geo-nft
wirefalls / geo-nft
Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.
nftables nftables-geoip netfilter firewalls firewall-rules firewall-configuration linux-security linux-server geoip-database nftables-rules geo-ip geoip-location ransomware-prevention malware-protection phishing-protection ddos-mitigation anti-malware ddos-protection anti-phishing ip-geolocation
Language:Shell 121
landhb / DrawBridge
Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)
bpf linux-kernel netfilter iptables-extension iptables port-knocking rust port-knocker port-knock knocker
Language:C 116
rpthms / nft-geo-filter
Allow/deny traffic in nftables using country specific IP blocks
nftables blacklist netfilter geo-ip ip-blacklist nft-blacklist blacklist-sets ip-geolocation whitelists-ip ip-whitelist
Language:Python 111
florianl / go-nfqueue
c-binding free API for golang to communicate with the queue subsystem of netfilter
nfqueue golang netfilter hacktoberfest
Language:Go 93
yaa110 / rust-iptables
Rust bindings for iptables
bindings iptables netfilter rust rust-crate
Language:Rust 90
milesrichardson / docker-nfqueue-scapy
Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)
netfilter nfqueue docker scapy python iptables
Language:Python 81
Pwnzer0tt1 / firegex
Firegex, a firewall for Attack-Defense CTFs
application-firewall attack-defense ctf firewall intrusion-detection netfilter netfilter-queue nftables reverse-proxy firegex
Language:Python 81
Sina-Ghaderi / goshkan
Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control
proxy-server tls-proxy http-proxy sni-proxy 65535-ports iptables netfilter regexp regex-filters regex-match mysql proxy go
Language:Go 81
ti-mo / netfilter
Pure-Go Netfilter Netlink family implementation.
golang-library netlink netfilter hacktoberfest
Language:Go 79
florianl / go-nflog
c-binding free API for golang to communicate with the log subsystem of netfilter
netfilter nflog golang kernel hacktoberfest
Language:Go 66
jwkohnen / conntrack-stats-exporter
Netfilter Conntrack Stats Exporter
conntrack kubernetes netfilter networking prometheus-exporter
Language:Go 63
TeaInside / teavpn2
TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).
network tunnel vpn vpn-server vpn-client linux netfilter tor-network hacktoberfest
Language:C 52
DAchilles / Netfilter-Firewall
华中科技大学2021网络安全课程设计（基于netfilter的状态检测防火墙）
hust netfilter firewall
Language:C 50
regit / opensvp
Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.
python security testing network scapy netfilter
Language:Python 48
yuuki / lsconntrack
The Linux netfilter conntrack-based connection flows pretty printer.
conntrack go linux netfilter tcp
Language:Go 42
eiginn / nftrace
Easier tracing of packets through iptables
iptables netfilter firewall tracing linux-networking
Language:Go 35
ashishraste / arp-dns-attacks
ARP spoofing, HTTP redirection, DNS spoofing and DNS forging using pcap library
linux c network-attacks netfilter-hook netfilter packet-capture pcap-library packet-sniffer http dns arp-poisoning
Language:C 32
DXC-0 / Respect-My-Internet
Opensnitch / LittleSnitch - No-Gafam (blocklist for facebook, google, microsoft, amazon, huawei, tencent, apple, xiaomi ...) - aggressive privacy and protection (trackers, spywares, malwares, cti feeds, malicious ips, phishing...) - 99% in adsblockers tests !
adguard anonymity blocklist firewall firewall-configuration firewall-rules no-amazon no-apple no-batx no-facebook no-gafam no-microsoft open-source opensnitch pihole privacy-protection privacy-tools respect-privacy security ublock
Language:Shell 30
freeyoung / netfilter-persistent-plugin-ipset
A plugin of netfilter-persistent in debian/ubuntu to make ipset rules persistent, especially on reboot.
ipset iptables-persistent netfilter netfilter-persistent
Language:Shell 28
dev2lead / uppersafe-osfw
UPPERSAFE Open Source Firewall
firewall dns netfilter iptables unbound python security
Language:Python 22
alegarsan11 / nftables-gui
This is a repository to develop a web interface to enble configuration of nftables via GUI.
chains firewall frontend iptables netfilter nftables rules tables web-frontend
Language:Python 18
juli3nk / go-netfilter
Go implentation for Iptables
go golang netfilter iptables
Language:Go 17
Ty-Chen / NAT
NAT type configuration and switch
nat nat-configuration netfilter iptables
Language:C 17
jchavanton / disruptor
generating problems on RTP streams : latency, delay, jitter
networking simulator latency jitter packet loss c netfilter disruptor
Language:C 16
cSuk1 / FireWall
基于Netfilter的包过滤状态防火墙
dos firewall netfilter security tcp-ip
Language:C 14
iamhyc / Netfilter-L4-Encryption
An encryption trial with AES-128 on Linux kernel subsystem Netfilter
netfilter netlink aes-256
Language:C 12
secynic / nfsinkhole
nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a secondary interface).
bsd-license firewalld iptables linux netfilter network networking rsyslog service sinkhole syslog syslog-ng systemd tcpdump
Language:Python 12
tkob-vh / gfw-rs
Rewrite OpenGFW in Rust, with web-ui.
gfw netfilter networking nfqueue rust tools filtering firewall
Language:Rust 12

netfilter

borestad / blocklist-abuseipdb

x-way / iptables-tracer

AliDbg / IPBAN

ti-mo / conntrack

dxwu / BinderFilter

mintyYuki / antiddos

vel21ripn / nDPI

ntop / ipt_geofence

wirefalls / geo-nft

landhb / DrawBridge

rpthms / nft-geo-filter

florianl / go-nfqueue

yaa110 / rust-iptables

milesrichardson / docker-nfqueue-scapy

Pwnzer0tt1 / firegex

Sina-Ghaderi / goshkan

ti-mo / netfilter

florianl / go-nflog

jwkohnen / conntrack-stats-exporter

TeaInside / teavpn2

DAchilles / Netfilter-Firewall

regit / opensvp

yuuki / lsconntrack

eiginn / nftrace

ashishraste / arp-dns-attacks

DXC-0 / Respect-My-Internet

freeyoung / netfilter-persistent-plugin-ipset

dev2lead / uppersafe-osfw

alegarsan11 / nftables-gui

juli3nk / go-netfilter

Ty-Chen / NAT

jchavanton / disruptor

cSuk1 / FireWall

iamhyc / Netfilter-L4-Encryption

secynic / nfsinkhole

tkob-vh / gfw-rs