Free firewall generator software for linux

Firewall Generator is a CGI script that generates a bash shell script that contains a list of commands for configuring a set of firewall rules.

It is the best solution to know something about system security.

PacketFlow Firewall Generator is an XML based firewall generator. It takes an XML configuration file that defines the firewall policy and generates a list of iptables commands to implement this policy. It is primarily intended for use on dedicated firewalls, but it can be used in other scenarios. It makes dealing with many interfaces easy.
PacketFlow works on the concept of interface "security levels." New connections are allowed to flow down hill from interfaces with a high security level to interfaces with a low security level. This approach tends to make rule sets much shorter, even with many interfaces.
Access lists allow you to override the default behavior of the security levels. Access lists are defined between interfaces. There is also support for incoming, outgoing, and wildcard access lists. Wildcard access lists allow you to easily allow new connections to a particular service from any interface. Access lists are applied only to "new" connections, and once a connection has been established, you no longer need to deal with it specifically.
The first thing to do is evaluate what you need your firewall to do. This is probably the most important part. Once you know what you are trying to accomplish, study the samples in the samples directory of this distribution. There are many configurations for this software, and one is likely to give you a place to start.
Once you have a configuration, you need to generate the rules from it. This is done by running the packetflow program with the file name as its argument. For now, it sends the rules to STDOUT, so probably want to redirect them into a file.
Enhancements:
- This version no longer uses the unclean match, because it isnt available in kernel 2.6.
- The Debian packages have been updated to work correctly with newer releases, and the version has been updated to 1.0.

The Firewall Tester (FTester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities.The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in ftest.conf, with a signature in the data part while the sniffer listens for such marked packets. The scripts both write a log file which is in the same form for both scripts. A diff of the two produced files (ftest.log and ftestd.log) shows the packets that were unable to reach the sniffer due to filtering rules if these two scripts are ran on hosts placed on two different sides of a firewall. Stateful inspection firewalls are handled with the connection spoofing option. A script called freport is also available for automatically write to log files.
Of course this is not an automated process, ftest.conf must be crafted for every different situation. Examples and rules are included in the attached configuration file.
The IDS (Intrusion Detection System) testing feature can be used either with ftest only or with the additional support of ftestd for handling stateful inspection IDS, ftest can also use common IDS evasion techniques. Instead of using the configuration syntax currently the script can also process snort rule definition file.
These two scripts were written because I was tired of doing this by hand (with packet-crafting tools and tcpdump), I know that there are at least two dozens of other methods to do this but another reason was to learn some perl ;). I hope that you enjoy them.
Main features:
- firewall testing
- IDS testing
- simulation of real tcp connections for stateful inspection firewalls and IDS
- connection spoofing
- IP fragmentation / TCP segmentation
- IDS evasion techniques

QOF Generator is a project that generates C object source code from HTML/PHP or Perl/XML.

Generating new objects for the Query Object Framework is repetitive, tedious, and time consuming.

Qof Generator automates this process in PHP to build a working test program linked against QOF.

Objects are created from an HTML form using a temporary MySQL cache and exported with Makefile, ./autogen.sh, ChangeLog, README, C source code, and doxygen mark-up comments in a tarball built by the PHP code.

Sid is an LL(1) parser generator. This project can read grammars written in more convenient forms and transform them to LL(1).
The language-specific actions are stored seperately to the grammar, which allows for multiple languages in the future.
Although Sid is intended to be used with lexi an example is included demonstrating use with lex.
Enhancements:
- This is the first release of Sid as a stand-alone project. It has been moved out of the TenDRA compiler.

XML::Generator is a Perl extension for generating XML.

SYNOPSIS

use XML::Generator :pretty;

print foo(bar({ baz => 3 }, bam()),
bar([ qux => http://qux.com/ ],
"Hey there, world"));

# OR

use XML::Generator ();

my $X = XML::Generator->new(:pretty);

print $X->foo($X->bar({ baz => 3 }, $X->bam()),
$X->bar([ qux => http://qux.com/ ],
"Hey there, world"));
Either of the above yield:
< foo xmlns:qux="http://qux.com/" >

< bam / >
< /bar >
< qux:bar >Hey there, world< /qux:bar >
< /foo >

In general, once you have an XML::Generator object, you then simply call methods on that object named for each XML tag you wish to generate.

By default, use XML::Generator; tries to export an AUTOLOAD subroutine to your package, which allows you to simply call any undefined methods in your current package to get pieces of XML. If you already have an AUTOLOAD defined then XML::Generator will not override it unless you tell it to. See "STACKABLE AUTOLOADs".

Password List Generator is a good tool to create passwords list with makepasswd and save to file.