Free filtering information software for linux

Web Information Saver saves and organizes texts, infos and quotations from the web.

Saving all kinds of text like news, quotations, informations with source and date for offline use.

The saved infos are sorted in categories and can be searched easily. Very handy for creating papers and researches but also for saving postings from online discussion boards etc, its also possible to save (and view) the information directly in HTML source code.

Why shouldnt i use the Browsers SAVE PAGE.. function?
I did it like this and lost soon the overview. Its always a complete site that is saved -even if you are just interested in one simple sentence! And these large files are scattered all over your harddisc and its uncomfortable to find them or to search within them.

Why shouldnt i use other tools?
Hey! You can use whatever you like. But they all depend on a special operating system or a special browser or they are just expensive. Through the renouncement on platform specific functions, the WEB INFORMATION SAVER is able to run on all major operating systems like Windows, Linux, Unix, MAC OS X etc.

User Account Information provides an ethernet users/customers traffic counter.
User Account Information is lightweight system for accounting for ethernet traffic on a per-user basis.
It includes a Web-based interface for allowing users to view their own network accounting information.
This product was designed and was tested in RedHat Linux 6.2 and in SlackWare Linux 7.0.
Main features:
- For each customer (who have IP adress in your local network area) are added two ipchains rule for counting input and output traffic.
- Each customer can look his own account information through WEB-interface.
- You ( as system administrator) can correct anything You want or anything you dont like in this program.
Enhancements:
- A date format error solely affecting output with DD/MM/YYYY action dates was corrected in the cgi-bin part.

Single Source information Server provides a set of applets for sharing information from a single source.
The Single Source Infomation Server is a suite of applets designed to share information from a single source, a set of MySQL tables, with as many other systems as possible, starting with PHP, Palm OS PDAs, LDAP, and WAP.
The first part of this project will create a set of PHP pages to edit the information inside a simple set of tables.
This will be the first bi-directional applet (DONE). Following on from there will the ability to export some of this data into a format that can be used by the file link feature in HotSync (DONE), a bi-directional PDA sync (DONE) and by an LDAP server applet, the ability to print single address labels onto a Dymo / CoStar label printer, print envelopes and create a mail-merge export for letters.
If we can work out or get the spec, we will write a QuickBooks timer export for the datebook, and allow import/export of vCal, iCal and vCards.
Enhancements:
- This release fixes a number of bugs and adds some new functionality, includine LDAP.
- After this release we will be making a major re-write to the coldsync conduits, so the next release will be an alpha release of Version 0.2

Kwok Information Server project is a Web-based information management system for managing issues, contacts, and IT assets including hardware and software licenses. The Issue Management module provides users a way to report issues and search for the issues they need to work on.

The IT Asset Management module provides hardware tracking and software license tracking. The Contact Management module allows users to create and maintain contacts. The Administration Tool module allows administrators to manage system users and to modify the system configuration.

There is built-in support for access control, email notification, LDAP authentication, file uploads, and more.

GIST is a tool kit for the rapid development of interactive web based information servers.

GIST removes the technical barriers traditionally associated with creating interactive web sites.

It has been specifically designed to allow user communities to share information and communicate more effectively without the need for a full-time technical web master.

GIST provides support for managing user definable information objects, so you dont write any CGI programs or SQL in your HTML, or worry about indexing your data: GIST does it for you.

You define your data and its structure and GIST takes care of adding, changing, deleting and indexing it, allowing you to focus on the important issues of providing the features and facilities your user community expect and demand.

Traditional approaches to web-based-publishing involve a centralised ``webmaster or group of webmasters responsible for the provision of information contained within the site and for its maintenance. As the site grows, the cost of maintenance increases.

The prototyping activities undertaken by the Joint Rresearch Center of the European Commission (JRC) provide an alternative approach to populating and maintaining a web site, in which each member of the user community is responsible for maintaining their own information. The G7/GELOS1 server is a working example of the technology involved.

GIST is an effort undertaken by the JRC to build on the success of this prototyping activity and to generalise their functionality in a reusable component library for the construction of dynamic, user community based Information Servers. GIST allows users without programming skills to create a web server with a data model and user interface of their own design.

GIST makes it easier to build an Information Server by providing the software components required for common tasks.

In particular GIST provides facilities for: submission of information by members of a user community modification and deletion of information presentation of information search and browse user registration and user interface configuration user authentication and authorisation automatic validation of user input server configuration and definition of policy rules Regardless of the style of information it contains any Information Server needs to allow its user community to interact with it; in particular to populate and maintain the contents of its information store, and to view the information contributed by other members of the community.

Search and browse facilities are indispensable for all but the smallest of databases; there is no point storing information if no-one can ever find it.

GIST ensures that users are prevented from changing information that they are not authorised to change, and that database integrity is maintained at all times.

Various configuration options are available so that the server may be tailored the server behaviour to the needs of the community; of particular note is the ability to define local policy rules to be applied when the information store is modified.

Packet filtering setup script by Anthony C. Zboralski. Adapted by Didi Damian for iptables version 1.0.0

Sample:

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# Set up variables
EXT_IF="eth0"
INT_IF="eth1"
EXT_IP=24.x.x.x/32
INT_IP=192.168.0.1/32
EXT_NET=24.x.x.0/24
INT_NET=192.168.0.0/24
MASQ_NETS="192.168.0.0/24"
LOCAL_ADDRS="127.0.0.0/8 192.168.0.1/32 24.x.x.x/32"
MAIL_RELAY=24.x.x.x/32
SMB_ACCESS="192.168.0.2/32"
SMB_BCAST="192.168.0.255/32"

# Turn on IP forwarding
echo Turning on IP forwarding.
echo 1 > /proc/sys/net/ipv4/ip_forward

# Load the ip_tables module
echo Loading ip_tables module.
/sbin/modprobe ip_tables || exit 1
# I let the kernel dynamically load the other modules

echo Flush standard tables.
iptables --flush INPUT
iptables --flush OUTPUT
iptables --flush FORWARD
echo Deny everything until firewall setup is completed.
iptables --policy INPUT DROP
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP

CHAINS=`iptables -n -L |perl -n -e /Chains+(S+)/ && !($1 =~ /^(INPUT|FORWARD|OUTPUT)$/) && print "$1 "`
echo Remove remaining chains:
echo $CHAINS
for chain in $CHAINS; do
iptables --flush $chain
done
# 2nd step cause of dependencies
for chain in $CHAINS; do
iptables --delete-chain $chain
done

for net in $MASQ_NETS; do
# I delete all the rules so you can rerun the scripts without bloating
# your nat entries.
iptables -D POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE 2>/dev/null
iptables -A POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE || exit 1
done
iptables --policy FORWARD ACCEPT

# Create a target for logging and dropping packets
iptables --new LDROP 2>/dev/null
iptables -A LDROP --proto tcp -j LOG --log-level info
--log-prefix "TCP Drop "
iptables -A LDROP --proto udp -j LOG --log-level info
--log-prefix "UDP Drop "
iptables -A LDROP --proto icmp -j LOG --log-level info
--log-prefix "ICMP Drop "
iptables -A LDROP --proto gre -j LOG --log-level info
--log-prefix "GRE Drop "

iptables -A LDROP -f -j LOG --log-level emerg
--log-prefix "FRAG Drop "
iptables -A LDROP -j DROP

# Create a table for watching some accepting rules
iptables --new WATCH 2>/dev/null
iptables -A WATCH -m limit -j LOG --log-level warn --log-prefix "ACCEPT "
iptables -A WATCH -j ACCEPT


echo Special target for local addresses:
iptables --new LOCAL 2>/dev/null
echo $LOCAL_ADDRS
for ip in $LOCAL_ADDRS; do
iptables -A INPUT --dst $ip -j LOCAL
# iptables -A INPUT --src $ip -i ! lo -j LDROP # lame spoof protect
done
echo Authorize mail from mail relay.
iptables -A LOCAL --proto tcp --syn --src $MAIL_RELAY --dst $EXT_IP --dport 25 -j ACCEPT


echo Authorizing samba access to:
echo $SMB_ACCESS
iptables --new SMB 2>/dev/null
for ip in $SMB_ACCESS; do
iptables -A SMB -s $ip -j ACCEPT
done
iptables -A LOCAL --proto udp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 445 -j SMB
iptables -A INPUT -i ! $EXT_IF --dst $SMB_BCAST -j ACCEPT #lame samba broadcast

echo Drop and log every other incoming tcp connection attempts.
iptables -A LOCAL -i ! lo --proto tcp --syn --j LDROP

echo Authorize dns access for local nets.
for net in $MASQ_NETS 127.0.0.0/8; do
iptables -A INPUT --proto udp --src $net --dport 53 -j ACCEPT
done


echo Enforcing up ICMP policies, use iptables -L ICMP to check.
# If you deny all ICMP messages you head for trouble since it would
# break lots of tcp/ip algorythm (acz)
iptables --new ICMP 2>/dev/null
iptables -A INPUT --proto icmp -j ICMP
iptables -A ICMP -p icmp --icmp-type echo-reply -j ACCEPT
iptables -A ICMP -p icmp --icmp-type destination-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type protocol-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type port-unreachable -j ACCEPT
iptables -A ICMP -p icmp --icmp-type fragmentation-needed -j LDROP
iptables -A ICMP -p icmp --icmp-type source-route-failed -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type network-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type communication-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-precedence-violation -j LDROP
iptables -A ICMP -p icmp --icmp-type precedence-cutoff -j LDROP
iptables -A ICMP -p icmp --icmp-type source-quench -j LDROP
iptables -A ICMP -p icmp --icmp-type redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type echo-request -j WATCH
iptables -A ICMP -p icmp --icmp-type router-advertisement -j LDROP
iptables -A ICMP -p icmp --icmp-type router-solicitation -j LDROP
iptables -A ICMP -p icmp --icmp-type time-exceeded -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-transit -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-reassembly -j WATCH
iptables -A ICMP -p icmp --icmp-type parameter-problem -j WATCH
iptables -A ICMP -p icmp --icmp-type ip-header-bad -j WATCH
iptables -A ICMP -p icmp --icmp-type required-option-missing -j WATCH
iptables -A ICMP -p icmp --icmp-type timestamp-request -j LDROP
iptables -A ICMP -p icmp --icmp-type timestamp-reply -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-request -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-reply -j LDROP
iptables -A ICMP -p icmp -j LDROP

echo Authorize tcp traffic.
iptables -A INPUT --proto tcp -j ACCEPT

echo Authorize packet output.
iptables --policy OUTPUT ACCEPT

#echo reject ident if you drop em you gotta wait for timeout
#iptables -I LOCAL --proto tcp --syn --dst $EXT_IP --dport 113 -j REJECT

echo Drop and log all udp below 1024.
iptables -A INPUT -i ! lo --proto udp --dport :1023 -j LDROP

echo Drop rpc dynamic udp port:
RPC_UDP=`rpcinfo -p localhost|perl -n -e /.*udps+(d+)s+/ && print $1,"n"|sort -u`
echo $RPC_UDP
for port in $RPC_UDP; do
iptables -A LOCAL -i ! lo --proto udp --dport $port -j LDROP
done

echo Authorize udp above 1024.
iptables -A INPUT --proto udp --dport 1024: -j ACCEPT