destination ip
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 1313
GENeric Radio IP 1.0
GENRIP is a kernel driver (presently for Linux only) that enables you to carry ethernet frames. more>>
GENRIP is a kernel driver (presently for Linux only) that enables you to carry ethernet frames over generic low-speed/low-power serial radios, such as Microhards MHX series radios. It is intended to speed up the development cycle for those creating low-powered Embedded telemetry and SCADA devices, but may have other applications as well. Once installed, the serial radio simply appears as a network interface like this:
[root@lindev]# ./ifconfig gr0
gr0 Link encap:Generic Radio IP HWaddr 00:00:02:04:06:08
inet addr:192.168.15.1 Mask:255.255.255.0
UP RUNNING MTU:234 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:30
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
GENRIP was originally based upon Stuart Cheshires STRIP driver, which is part of the Mobile Computing Group at Stanford Universitys Mosquitonet project. It has been radically modified since.
GENRIP was ported to this application by Lawrence Wimble of Design On Demand, Inc. Design On Demand, Inc. maintains GENRIP and hopes that youll call them if you need help with an embedded project using GENRIP (or any embedded project for that matter).
GENRIP is released for Linux under the GPL. A port to FreeBSD is planned in the near future.
<<less[root@lindev]# ./ifconfig gr0
gr0 Link encap:Generic Radio IP HWaddr 00:00:02:04:06:08
inet addr:192.168.15.1 Mask:255.255.255.0
UP RUNNING MTU:234 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:30
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
GENRIP was originally based upon Stuart Cheshires STRIP driver, which is part of the Mobile Computing Group at Stanford Universitys Mosquitonet project. It has been radically modified since.
GENRIP was ported to this application by Lawrence Wimble of Design On Demand, Inc. Design On Demand, Inc. maintains GENRIP and hopes that youll call them if you need help with an embedded project using GENRIP (or any embedded project for that matter).
GENRIP is released for Linux under the GPL. A port to FreeBSD is planned in the near future.
Download (0.024MB)
Added: 2006-07-04 License: GPL (GNU General Public License) Price:
1210 downloads
external IP 0.9.9
external IP shows your current external IP in the browsers statusbar. more>>
external IP shows your current external IP in the browsers statusbar.
External IP is set to check your IP address once every hour.
<<lessExternal IP is set to check your IP address once every hour.
Download (0.004MB)
Added: 2007-07-23 License: MPL (Mozilla Public License) Price:
846 downloads
netstat-nat 1.4.7
Netstat-nat is a small program written in C. more>>
Netstat-nat is a small program written in C. It displays NAT connections, managed by netfilter/iptables which comes with the > 2.4.x linux kernels. The program reads its information from /proc/net/ip_conntrack, which is the temporary conntrack-storage of netfilter. (http://netfilter.samba.org/). Netstat-nat takes several arguments but they not needed.
-h displays help
-n dont resolve IPs/ports to host/portnames.
-p protocol display NAT connections with protocol selection.
-s source host display connections by source IP/hostname.
-d destination host display connections by destination IP/hostname.
-S display SNAT connections
-D display DNAT connections
-L display only connections to NAT box self (disables display of SNAT & DNAT)
-x extended view of hostnames
-r src | dst | src-port | dst-port | state sort connections
-o strip output-header
Enhancements:
- This release contains a fix for read-in (ip_conntrack).
- Previous versions could sometimes hang or segfault on some systems.
- There is a fix for displaying DNAT over SNAT connections.
<<less-h displays help
-n dont resolve IPs/ports to host/portnames.
-p protocol display NAT connections with protocol selection.
-s source host display connections by source IP/hostname.
-d destination host display connections by destination IP/hostname.
-S display SNAT connections
-D display DNAT connections
-L display only connections to NAT box self (disables display of SNAT & DNAT)
-x extended view of hostnames
-r src | dst | src-port | dst-port | state sort connections
-o strip output-header
Enhancements:
- This release contains a fix for read-in (ip_conntrack).
- Previous versions could sometimes hang or segfault on some systems.
- There is a fix for displaying DNAT over SNAT connections.
Download (0.071MB)
Added: 2006-08-19 License: GPL (GNU General Public License) Price:
1168 downloads
Serial Over IP 1.0
Serial Over IP is a tool for the transport of serial interfaces over UDP/IP. more>>
Serial Over IP is a tool for the transport of serial interfaces over UDP/IP. It is very usefull for connecting distant equipment that run via a serial interfaces to a local computer.
One linux will be server and one will be client. On the server you can start the program typing the following command:
bash# serialoverip -d /dev/ttyS0 9600-8n1 -s 127.0.0.1 3000
... and on the client:
bash# serialoverip -c 127.0.0.1 3000 -d /dev/ttyS1 9600-8n1
In both commands the IP address is the server IP. Note that you have to start the server first, and it will be efectively be running only after the first packet received from the client.
<<lessOne linux will be server and one will be client. On the server you can start the program typing the following command:
bash# serialoverip -d /dev/ttyS0 9600-8n1 -s 127.0.0.1 3000
... and on the client:
bash# serialoverip -c 127.0.0.1 3000 -d /dev/ttyS1 9600-8n1
In both commands the IP address is the server IP. Note that you have to start the server first, and it will be efectively be running only after the first packet received from the client.
Download (0.16MB)
Added: 2006-07-05 License: GPL (GNU General Public License) Price:
1218 downloads
ntop 3.3
ntop is a network probe that shows network usage in a way similar to what top does for processes. more>>
ntop is a network traffic probe that shows the network usage, similar to what the popular top Unix command does.
The project is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform and on Win32 as well.
ntop users can use a a web browser (e.g. netscape) to navigate through ntop (that acts as a web server) traffic information and get a dump of the network status.
In the latter case, ntop can be seen as a simple RMON-like agent with an embedded web interface. The use of:
a web interface
limited configuration and administration via the web interface
reduced CPU and memory usage (they vary according to network size and traffic)
make ntop easy to use and suitable for monitoring various kind of networks.
Main features:
- Sort network traffic according to many protocols
- Show network traffic sorted according to various criteria
- Display traffic statistics
- Store on disk persistent traffic statistics in RRD format
- Identify the indentity (e.g. email address) of computer users
- Passively (i.e. withou sending probe packets) identify the host OS
- Show IP traffic distribution among the various protocols
- Analyse IP traffic and sort it according to the source/destination
- Display IP Traffic Subnet matrix (whos talking to who?)
- Report IP protocol usage sorted by protocol type
- Act as a NetFlow/sFlow collector for flows generated by routers (e.g. Cisco and Juniper) or switches (e.g. Foundry Networks)
- Produce RMON-like network traffic statistics
Additional features of "ntop":
- Network Flows
- Local Traffic Analysis
- Multithread and MP (MultiProcessor) support on both Unix and Win32
- Perl/PHP/Python lightweight API for accessing ntop from remote
- Support of both NetFlow andsFlow as flow collector. ntop can collect simultaneously from multiple probes.
- Traffic statistics are saved into RRD databases for long-run traffic analysis.
- Internet Domain, AS (Autonomous Systems), VLAN (Virtual LAN) Statistics
- Network assets discovery and categorization according to their OS and users
- Protocol decoders for most of known P2P (Peer to Peer) protocols
- Advanced per user HTTP password protection with encrypted passwords
- RRD support for persistently storing per-host traffic information
- Passive remote host fingerprint (Courtesy of ettercap)
- HTTPS (Secure HTTP via OpenSSL)
- Virtual/multiple network interfaces support
- Graphical Charts (via gdchart)
- WAP support
<<lessThe project is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform and on Win32 as well.
ntop users can use a a web browser (e.g. netscape) to navigate through ntop (that acts as a web server) traffic information and get a dump of the network status.
In the latter case, ntop can be seen as a simple RMON-like agent with an embedded web interface. The use of:
a web interface
limited configuration and administration via the web interface
reduced CPU and memory usage (they vary according to network size and traffic)
make ntop easy to use and suitable for monitoring various kind of networks.
Main features:
- Sort network traffic according to many protocols
- Show network traffic sorted according to various criteria
- Display traffic statistics
- Store on disk persistent traffic statistics in RRD format
- Identify the indentity (e.g. email address) of computer users
- Passively (i.e. withou sending probe packets) identify the host OS
- Show IP traffic distribution among the various protocols
- Analyse IP traffic and sort it according to the source/destination
- Display IP Traffic Subnet matrix (whos talking to who?)
- Report IP protocol usage sorted by protocol type
- Act as a NetFlow/sFlow collector for flows generated by routers (e.g. Cisco and Juniper) or switches (e.g. Foundry Networks)
- Produce RMON-like network traffic statistics
Additional features of "ntop":
- Network Flows
- Local Traffic Analysis
- Multithread and MP (MultiProcessor) support on both Unix and Win32
- Perl/PHP/Python lightweight API for accessing ntop from remote
- Support of both NetFlow andsFlow as flow collector. ntop can collect simultaneously from multiple probes.
- Traffic statistics are saved into RRD databases for long-run traffic analysis.
- Internet Domain, AS (Autonomous Systems), VLAN (Virtual LAN) Statistics
- Network assets discovery and categorization according to their OS and users
- Protocol decoders for most of known P2P (Peer to Peer) protocols
- Advanced per user HTTP password protection with encrypted passwords
- RRD support for persistently storing per-host traffic information
- Passive remote host fingerprint (Courtesy of ettercap)
- HTTPS (Secure HTTP via OpenSSL)
- Virtual/multiple network interfaces support
- Graphical Charts (via gdchart)
- WAP support
Download (2.4MB)
Added: 2007-06-10 License: GPL (GNU General Public License) Price:
547 downloads
EHNT 0.4
EHNT is a tool which turns streams of Netflow (version 5) data into something useful and human-readable. more>>
EHNT is a tool which turns streams of Netflow (version 5) data into something useful and human-readable. (Netflow is a UDP-based traffic reporting protocol created by Cisco, generated by Cisco, Juniper, Foundry, and other routers.)
Netflow operates in many ways. It will dump flow records in human-readable form. It will also provide reports on top ASes, IP protocols, and tcp/udp ports. The reports can be generated over various intervals, from 1 minute to 1 day.
Component programs are:
1. ehntserv listens to netflow version 5 UDP packets, and also listens for client TCP connections. When a TCP client connects, the server starts forwarding all the netflow packets it receives (plus the IP address of the originating device) to that client.
ehntserv does not currently do any IP access control. I suggest that you use ipchains or iptables on your linux box, or IP Filter (ipf) (http://coombs.anu.edu.au/ipfilter/) on your Solaris or BSD box. I dont know what the current state of packet filtering is on other Unixes; IP Filter seems to support several.
2. ehnt connects to ehntserv and displays the flows it receives in various ways. It currently has four modes (-m ):
- top mode displays average utilization by top ASes, IP protocols, or tcp/udp ports over a given interval (from 1 minute to 1 day).
Top mode is different when it focuses on a single interface on a single router, because then you get to see summaries of source and destionation for both inbound and outbound traffic. Otherwise, you just get summaries of source and destination.
- dump mode displays individual flows
- shortdump mode display individual flows in a more compact but hard
to read fashion
- colondump mode display individual flows in a machine-readable format.
And yes, I recognize that the name of this mode is unpleasant.
In all three modes, simple (REALLY simple) filtering can be done for AS
number, TCP/UDP port, IP protocol number, device sending the flow record,
and SNMP interface index.
You may think of ehnt in the three dump modes as a brain-dead and incredibly
simple tcpdump for netflow.
ehnt also has the silly and uninspiredly-named big filter, in which it
only displays flows with are bigger (in packets or bytes) than any flow
received before it. This only makes sense in the three dump modes.
Enhancements:
- Added Unix domain support for client connections, enabled by default
<<lessNetflow operates in many ways. It will dump flow records in human-readable form. It will also provide reports on top ASes, IP protocols, and tcp/udp ports. The reports can be generated over various intervals, from 1 minute to 1 day.
Component programs are:
1. ehntserv listens to netflow version 5 UDP packets, and also listens for client TCP connections. When a TCP client connects, the server starts forwarding all the netflow packets it receives (plus the IP address of the originating device) to that client.
ehntserv does not currently do any IP access control. I suggest that you use ipchains or iptables on your linux box, or IP Filter (ipf) (http://coombs.anu.edu.au/ipfilter/) on your Solaris or BSD box. I dont know what the current state of packet filtering is on other Unixes; IP Filter seems to support several.
2. ehnt connects to ehntserv and displays the flows it receives in various ways. It currently has four modes (-m ):
- top mode displays average utilization by top ASes, IP protocols, or tcp/udp ports over a given interval (from 1 minute to 1 day).
Top mode is different when it focuses on a single interface on a single router, because then you get to see summaries of source and destionation for both inbound and outbound traffic. Otherwise, you just get summaries of source and destination.
- dump mode displays individual flows
- shortdump mode display individual flows in a more compact but hard
to read fashion
- colondump mode display individual flows in a machine-readable format.
And yes, I recognize that the name of this mode is unpleasant.
In all three modes, simple (REALLY simple) filtering can be done for AS
number, TCP/UDP port, IP protocol number, device sending the flow record,
and SNMP interface index.
You may think of ehnt in the three dump modes as a brain-dead and incredibly
simple tcpdump for netflow.
ehnt also has the silly and uninspiredly-named big filter, in which it
only displays flows with are bigger (in packets or bytes) than any flow
received before it. This only makes sense in the three dump modes.
Enhancements:
- Added Unix domain support for client connections, enabled by default
Download (2.3MB)
Added: 2006-07-03 License: GPL (GNU General Public License) Price:
1209 downloads
mod_limitipconn 0.04
mod_limitipconn is an Apache module which allows web server administrators to limit the number of simultaneous downloads. more>>
mod_limitipconn is an Apache module which allows web server administrators to limit the number of simultaneous downloads permitted from a single IP address.
<<less Download (0.007MB)
Added: 2006-05-11 License: The Apache License 2.0 Price:
1265 downloads
Initial SIMPLE IP Firewall
Initial SIMPLE IP Firewall is a script for Linux 2.4.x and iptables. more>>
Initial SIMPLE IP Firewall is a script for Linux 2.4.x and iptables.
Sample:
Configuration options
###################################
#
# Local Area Network configuration.
#
# your LANs IP range and localhost IP. /24 means to only use the first 24
# bits of the 32 bit IP adress. the same as netmask 255.255.255.0
#
LAN_IP="192.168.0.2"
LAN_IP_RANGE="192.168.0.0/16"
LAN_BCAST_ADRESS="192.168.255.255"
LAN_IFACE="eth1"
###################################
#
# Localhost Configuration.
#
LO_IFACE="lo"
LO_IP="127.0.0.1"
###################################
#
# Internet Configuration.
#
INET_IP="194.236.50.155"
INET_IFACE="eth0"
###################################
#
# IPTables Configuration.
#
IPTABLES="/usr/sbin/iptables"
Module loading
#
# Needed to initially load modules
#
/sbin/depmod -a
#
# Adds some iptables targets like LOG, REJECT and MASQUARADE.
#
/sbin/modprobe ip_conntrack
/sbin/modprobe ip_tables
/sbin/modprobe iptable_filter
/sbin/modprobe iptable_mangle
/sbin/modprobe iptable_nat
/sbin/modprobe ipt_LOG
#/sbin/modprobe ipt_REJECT
#/sbin/modprobe ipt_MASQUERADE
#
# Support for owner matching
#
#/sbin/modprobe ipt_owner
#
# Support for connection tracking of FTP and IRC.
#
#/sbin/modprobe ip_conntrack_ftp
#/sbin/modprobe ip_conntrack_irc
<<lessSample:
Configuration options
###################################
#
# Local Area Network configuration.
#
# your LANs IP range and localhost IP. /24 means to only use the first 24
# bits of the 32 bit IP adress. the same as netmask 255.255.255.0
#
LAN_IP="192.168.0.2"
LAN_IP_RANGE="192.168.0.0/16"
LAN_BCAST_ADRESS="192.168.255.255"
LAN_IFACE="eth1"
###################################
#
# Localhost Configuration.
#
LO_IFACE="lo"
LO_IP="127.0.0.1"
###################################
#
# Internet Configuration.
#
INET_IP="194.236.50.155"
INET_IFACE="eth0"
###################################
#
# IPTables Configuration.
#
IPTABLES="/usr/sbin/iptables"
Module loading
#
# Needed to initially load modules
#
/sbin/depmod -a
#
# Adds some iptables targets like LOG, REJECT and MASQUARADE.
#
/sbin/modprobe ip_conntrack
/sbin/modprobe ip_tables
/sbin/modprobe iptable_filter
/sbin/modprobe iptable_mangle
/sbin/modprobe iptable_nat
/sbin/modprobe ipt_LOG
#/sbin/modprobe ipt_REJECT
#/sbin/modprobe ipt_MASQUERADE
#
# Support for owner matching
#
#/sbin/modprobe ipt_owner
#
# Support for connection tracking of FTP and IRC.
#
#/sbin/modprobe ip_conntrack_ftp
#/sbin/modprobe ip_conntrack_irc
Download (MB)
Added: 2007-02-13 License: GPL (GNU General Public License) Price:
983 downloads
SIAR 0.01
SIAR (Simple IP Account Reporter) is a plug-in for pmacct (Promiscuous Mode IP Accounting Package). more>>
SIAR (Simple IP Account Reporter) is a plug-in for pmacct (Promiscuous Mode IP Accounting Package) for creating specific reports of traffic on a LAN.
SIAR plugin creates an overview of the total of traffic that passed through the interface, a top protocol table, a top listener table, a top talkers table, a total situation table, seek for an IP source, seek for an IP destination, seek for both, a top conversation table and a graph for a specific day
Installation:
After you have download the file, you have to decompress it in the web-server folder. I suggest to decompress it in /var/www/, infact if you decompress it in an another you will have problems with the code.
cd /var/www/
tar xfz < name >-x-y-z.tar.gz
cd < name >-x-y-z.tar.gz
The tool is now installed. Read the CONFIG file for the configuration.
<<lessSIAR plugin creates an overview of the total of traffic that passed through the interface, a top protocol table, a top listener table, a top talkers table, a total situation table, seek for an IP source, seek for an IP destination, seek for both, a top conversation table and a graph for a specific day
Installation:
After you have download the file, you have to decompress it in the web-server folder. I suggest to decompress it in /var/www/, infact if you decompress it in an another you will have problems with the code.
cd /var/www/
tar xfz < name >-x-y-z.tar.gz
cd < name >-x-y-z.tar.gz
The tool is now installed. Read the CONFIG file for the configuration.
Download (4.5MB)
Added: 2006-03-15 License: GPL (GNU General Public License) Price:
1318 downloads
SASs Accounting Statistics 1.0.2
Sasacct fetches traffic stats via ipchains, ipfstat, iptables, pf, Cisco IP accounting, and SNMP. more>>
Sasacct fetches traffic stats via ipchains, ipfstat, iptables, pf, Cisco IP accounting, and SNMP. [COPYRIGHT=]
Using external program you have 4 options:
a) Linux 2.2.x with ipchains
b) Linux 2.4.x with iptables
c) OpenBSD using Daren Reeds ipf
d) OpenBSD >= 3.0 with pf
Using SNMP you have 2 options for accounting:
a) query the router for byte counters for specific interface
b) if your router is cisco you can use the ip accounting feature
and get a table with source and destination ips and a byte counter
and extract the needed information.
For displaying the collected information sasacct has cgi-script with username/password authentication which can display the data on a per daily basis generating
on-the-fly graphics with bandwith utilization. It can also generate static bandwith utilization graphics on 5 minutes interval. Information on how to configure SASacct is included
in the package.
<<lessUsing external program you have 4 options:
a) Linux 2.2.x with ipchains
b) Linux 2.4.x with iptables
c) OpenBSD using Daren Reeds ipf
d) OpenBSD >= 3.0 with pf
Using SNMP you have 2 options for accounting:
a) query the router for byte counters for specific interface
b) if your router is cisco you can use the ip accounting feature
and get a table with source and destination ips and a byte counter
and extract the needed information.
For displaying the collected information sasacct has cgi-script with username/password authentication which can display the data on a per daily basis generating
on-the-fly graphics with bandwith utilization. It can also generate static bandwith utilization graphics on 5 minutes interval. Information on how to configure SASacct is included
in the package.
Download (0.057MB)
Added: 2006-06-29 License: BSD License Price:
1213 downloads
NTTLScan 0.1
NTTLScan provides a network topology scanner. more>>
NTTLScan provides a network topology scanner.
Nttlscan is a quick network topology scanner, and it functions as a highly parallel traceroute. It randomly picks destination IP addresses and sends TCP or UDP probes.
Returning ICMP messages are interpreted to reconstruct the route that packets take to their respective destination. Nttlscan can be used to construct virtual routing topologies for Honeyd.
<<lessNttlscan is a quick network topology scanner, and it functions as a highly parallel traceroute. It randomly picks destination IP addresses and sends TCP or UDP probes.
Returning ICMP messages are interpreted to reconstruct the route that packets take to their respective destination. Nttlscan can be used to construct virtual routing topologies for Honeyd.
Download (0.089MB)
Added: 2007-03-21 License: BSD License Price:
948 downloads
FIAIF 1.21.0
FIAIF is an Intelligent Firewall. more>>
FIAIF is an Intelligent Firewall.
Unlike many other scripts, FIAIF can be truly customized allowing multiple interfaces (or rather zones). There is no limit on the number of zones. All configuration is done through configuration files. There is no need to understand the script behind it all.
The script makes heavy use of state-full firewalling, and all RELATED and ESTABLISHED packets are accepted on all chains. If you wish to block something out, dont accept it in the first place.
The script is written in BASH. Though this is not the optimal programming language to use, it means that you do not need to install extra interpreters on your firewall. This allows you to have a minimalistic installation on your firewall.
Main features:
- TOS bit can be set per protocol/port basis. (To be used by traffic shaping).
- Limit syslog logging.
- Specification of multiple zones - One or more per interface.
- Load specific connection tracking modules (FTP, IRC etc.).
- Examination of /proc/sys/net setting, for possibly dangerous system configurations.
- Setup of linux runtime parameters.
- Run userdefined commands before and after applying the firewall.
- Syslog scanning, giving more human readable output based on setup.
Zones support:
- Handling of dynamic IPs (DHCP).
- Interfaces with multiple IP addresses.
- Allow/drop and/or reject packets hitting the firewall from the zone.
- Restrict the type of packets originating from the firewall itself.
- Restrict packets coming from other zones.
- Ban IPs within the zone.
- Ban MAC addresses within the zone.
- Watch traffic from a specific IP.
- Limit number of specific packets, e.g. to avoid DoS attack.
- Port forwarding, changing the destination IP and port, allowing e.g. a transparent proxy.
- Masquerading/SNAT.
- Traffic Shaping per interface.
- Ulogd logging support.
- Packet marking, for e.g. advanced routing.
- Definition of IP aliases, to ease maintenance and improve readability of configuration files.
<<lessUnlike many other scripts, FIAIF can be truly customized allowing multiple interfaces (or rather zones). There is no limit on the number of zones. All configuration is done through configuration files. There is no need to understand the script behind it all.
The script makes heavy use of state-full firewalling, and all RELATED and ESTABLISHED packets are accepted on all chains. If you wish to block something out, dont accept it in the first place.
The script is written in BASH. Though this is not the optimal programming language to use, it means that you do not need to install extra interpreters on your firewall. This allows you to have a minimalistic installation on your firewall.
Main features:
- TOS bit can be set per protocol/port basis. (To be used by traffic shaping).
- Limit syslog logging.
- Specification of multiple zones - One or more per interface.
- Load specific connection tracking modules (FTP, IRC etc.).
- Examination of /proc/sys/net setting, for possibly dangerous system configurations.
- Setup of linux runtime parameters.
- Run userdefined commands before and after applying the firewall.
- Syslog scanning, giving more human readable output based on setup.
Zones support:
- Handling of dynamic IPs (DHCP).
- Interfaces with multiple IP addresses.
- Allow/drop and/or reject packets hitting the firewall from the zone.
- Restrict the type of packets originating from the firewall itself.
- Restrict packets coming from other zones.
- Ban IPs within the zone.
- Ban MAC addresses within the zone.
- Watch traffic from a specific IP.
- Limit number of specific packets, e.g. to avoid DoS attack.
- Port forwarding, changing the destination IP and port, allowing e.g. a transparent proxy.
- Masquerading/SNAT.
- Traffic Shaping per interface.
- Ulogd logging support.
- Packet marking, for e.g. advanced routing.
- Definition of IP aliases, to ease maintenance and improve readability of configuration files.
Download (0.17MB)
Added: 2007-01-24 License: GPL (GNU General Public License) Price:
1003 downloads
Very restrictive set of firewall rules
Very restrictive set of firewall rules script is a sample firewall for ip_tables. more>>
Very restrictive set of firewall rules script is a sample firewall for ip_tables, the tool for doing firewalling and masquerading under the 2.3.x/2.4.x series of kernels.
Be warned, this is a very restrictive set of firewall rules (and they should be, for proper security). Anything that you do not _specifically_ allow is logged and dropped into /dev/null, so if youre wondering why something isnt working, check /var/log/messages.
This is about as close as you get to a secure firewall. Its nasty, its harsh, and it will make your machine nearly invisible to the rest of the internet world. Have fun.
To run this script you must chmod 700 iptables-script and then execute it. To stop it from running, run iptables -F
Sample:
#Point this to your copy of ip_tables
IPT="/usr/local/bin/iptables"
#Load the module.
modprobe ip_tables
#Flush old rules, delete the firewall chain if it exists
$IPT -F
$IPT -F -t nat
$IPT -X firewall
#Setup Masquerading. Change the IP to your internal network and uncomment
#this in order to enable it.
#$IPT -A POSTROUTING -t nat -s 192.168.1.0/24 -j MASQUERADE
#$IPT -P FORWARD ACCEPT
#echo 1 > /proc/sys/net/ipv4/ip_forward
#Set up the firewall chain
$IPT -N firewall
$IPT -A firewall -j LOG --log-level info --log-prefix "Firewall:"
$IPT -A firewall -j DROP
#Accept ourselves
$IPT -A INPUT -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT
#If youre using IP Masquerading, change this IP to whatever your internl
#IP addres is and uncomment it
#$IPT -A INPUT -s 192.168.1.1/32 -d 0/0 -j ACCEPT
#Accept DNS, cause its warm and friendly
$IPT -A INPUT -p udp --source-port 53 -j ACCEPT
$IPT -A INPUT -p tcp --source-port 113 -j ACCEPT
$IPT -A INPUT -p tcp --destination-port 113 -j ACCEPT
#Allow ftp to send data back and forth.
$IPT -A INPUT -p tcp ! --syn --source-port 20 --destination-port 1024:65535 -j ACCEPT
#Accept SSH. Duh.
#$IPT -A INPUT -p tcp --destination-port 22 -j ACCEPT
#Send everything else ot the firewall.
$IPT -A INPUT -p icmp -j firewall
$IPT -A INPUT -p tcp --syn -j firewall
$IPT -A INPUT -p udp -j firewall
<<lessBe warned, this is a very restrictive set of firewall rules (and they should be, for proper security). Anything that you do not _specifically_ allow is logged and dropped into /dev/null, so if youre wondering why something isnt working, check /var/log/messages.
This is about as close as you get to a secure firewall. Its nasty, its harsh, and it will make your machine nearly invisible to the rest of the internet world. Have fun.
To run this script you must chmod 700 iptables-script and then execute it. To stop it from running, run iptables -F
Sample:
#Point this to your copy of ip_tables
IPT="/usr/local/bin/iptables"
#Load the module.
modprobe ip_tables
#Flush old rules, delete the firewall chain if it exists
$IPT -F
$IPT -F -t nat
$IPT -X firewall
#Setup Masquerading. Change the IP to your internal network and uncomment
#this in order to enable it.
#$IPT -A POSTROUTING -t nat -s 192.168.1.0/24 -j MASQUERADE
#$IPT -P FORWARD ACCEPT
#echo 1 > /proc/sys/net/ipv4/ip_forward
#Set up the firewall chain
$IPT -N firewall
$IPT -A firewall -j LOG --log-level info --log-prefix "Firewall:"
$IPT -A firewall -j DROP
#Accept ourselves
$IPT -A INPUT -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT
#If youre using IP Masquerading, change this IP to whatever your internl
#IP addres is and uncomment it
#$IPT -A INPUT -s 192.168.1.1/32 -d 0/0 -j ACCEPT
#Accept DNS, cause its warm and friendly
$IPT -A INPUT -p udp --source-port 53 -j ACCEPT
$IPT -A INPUT -p tcp --source-port 113 -j ACCEPT
$IPT -A INPUT -p tcp --destination-port 113 -j ACCEPT
#Allow ftp to send data back and forth.
$IPT -A INPUT -p tcp ! --syn --source-port 20 --destination-port 1024:65535 -j ACCEPT
#Accept SSH. Duh.
#$IPT -A INPUT -p tcp --destination-port 22 -j ACCEPT
#Send everything else ot the firewall.
$IPT -A INPUT -p icmp -j firewall
$IPT -A INPUT -p tcp --syn -j firewall
$IPT -A INPUT -p udp -j firewall
Download (MB)
Added: 2007-02-14 License: GPL (GNU General Public License) Price:
984 downloads
KSniffer 0.3
KSniffer is a sniffing application for KDE. more>>
KSniffer is a sniffing application for KDE. KSniffer is in the starting release... Not yet released as stable, not for crashed, but for few feature.
Enhancements:
- add/remove KSniffer in the system tray bar
- added KSniffer option dialog:
- sniffer settings:
- display packets after you stopped capture available
- capture settings:
- stop manually
- stop after X packets
- stop after X bytes/kilobytes/megabyes/gigabytes
- stop after X seconds/minutes/hours/days
- added data for TCP detail display
- added pause/continue capture
- reading ports name from system (file /etc/services)
- quick search added (dependancy from kdelibs >= 3.3)
- better management for loading file
- better management for temporary file
- root privileges dont need anymore for the GUI
- removed sorting feature cause of bad performing for lots of packets
- getting information on IP: can be detected some networking information
- on source or destination selected IP:
- whois
- traceroute
- ping
- dig
- host
- nslookup
- compiling on FreeBSD and some other Linux platform
- fixed boring bugs
Enhancements:
- new icon and splashscreen thanks to Carmine De Rosa
- fixed crash when you click on a captured packet after you tryed to open a file, but you didnt open it
- give the port name to UDP and TCP connections getting them from /etc/services file
- show raw bytes of a selected packet from the list of the captured one
- changed "sniff" application name to "ksniff" to avoid name conflicts with other sniffing applications
- fixed bug that avoid saving sniffed data quitting from the application
- get the list of the network interfaces that have different MAC addresses
- check ksniff permissions to avoid users think KSniffer doesnt work: Debian/*ubuntu/OpenSuSE remove
- the suid bit: a warning dialog will appear in case ksniff ha not found or has not the SUID bit
<<lessEnhancements:
- add/remove KSniffer in the system tray bar
- added KSniffer option dialog:
- sniffer settings:
- display packets after you stopped capture available
- capture settings:
- stop manually
- stop after X packets
- stop after X bytes/kilobytes/megabyes/gigabytes
- stop after X seconds/minutes/hours/days
- added data for TCP detail display
- added pause/continue capture
- reading ports name from system (file /etc/services)
- quick search added (dependancy from kdelibs >= 3.3)
- better management for loading file
- better management for temporary file
- root privileges dont need anymore for the GUI
- removed sorting feature cause of bad performing for lots of packets
- getting information on IP: can be detected some networking information
- on source or destination selected IP:
- whois
- traceroute
- ping
- dig
- host
- nslookup
- compiling on FreeBSD and some other Linux platform
- fixed boring bugs
Enhancements:
- new icon and splashscreen thanks to Carmine De Rosa
- fixed crash when you click on a captured packet after you tryed to open a file, but you didnt open it
- give the port name to UDP and TCP connections getting them from /etc/services file
- show raw bytes of a selected packet from the list of the captured one
- changed "sniff" application name to "ksniff" to avoid name conflicts with other sniffing applications
- fixed bug that avoid saving sniffed data quitting from the application
- get the list of the network interfaces that have different MAC addresses
- check ksniff permissions to avoid users think KSniffer doesnt work: Debian/*ubuntu/OpenSuSE remove
- the suid bit: a warning dialog will appear in case ksniff ha not found or has not the SUID bit
Download (0.65MB)
Added: 2007-07-22 License: GPL (GNU General Public License) Price:
826 downloads
NetCARD Config 1.05
NetCARD Config project helps linux users to configure network cards for two ip one for DSL network one for Local Network. more>>
NetCARD Config project helps linux users to configure network cards for two ip one for DSL network one for Local Network.
<<less Download (0.030MB)
Added: 2006-03-27 License: GPL (GNU General Public License) Price:
1315 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above destination ip search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed