Main > Free Download Search >

Free firewall security solution software for linux

firewall security solution

Sponsored Links
Sponsored Links
All software
Freeware
Trial / Shareware
Business / Commercial
Sort by >> Relevance Date Popularity Rating
rss
Secleted [ 0 ] software to compare
Results 1 - 15 of about 2237
UTIN Firewall script

UTIN Firewall script


UTIN Firewall script project is a script for Linux 2.4.x and iptables. more>>
UTIN Firewall script project is a script for Linux 2.4.x and iptables.

###########
# Configuration options, these will speed you up getting this script to
# work with your own setup.

#
# your LANs IP range and localhost IP. /24 means to only use the first 24
# bits of the 32 bit IP adress. the same as netmask 255.255.255.0
#
# INET_IP is used by me to allow myself to do anything to myself, might
# be a security risc but sometimes I want this. If you dont have a static
# IP, I suggest not using this option at all for now but its still
# enabled per default and will add some really nifty security bugs for all
# those who skips reading the documentation=)

LAN_IP="192.168.0.2"
LAN_BCAST_ADRESS="192.168.0.255"
LAN_IFACE="eth1"

LO_IFACE="lo"
LO_IP="127.0.0.1"

INET_IP="194.236.50.155"
INET_IFACE="eth0"

IPTABLES="/usr/local/sbin/iptables"

#########
# Load all required IPTables modules
#

#
# Needed to initially load modules
#
/sbin/depmod -a

#
# Adds some iptables targets like LOG, REJECT and MASQUARADE.
#
/sbin/modprobe ipt_LOG
#/sbin/modprobe ipt_REJECT
/sbin/modprobe ipt_MASQUERADE

#
# Support for owner matching
#
#/sbin/modprobe ipt_owner

#
# Support for connection tracking of FTP and IRC.
#
#/sbin/modprobe ip_conntrack_ftp
#/sbin/modprobe ip_conntrack_irc

#
# Enable ip_forward, this is critical since it is turned off as defaul in
# Linux.
#

echo "1" > /proc/sys/net/ipv4/ip_forward

#
# Dynamic IP users:
#
#echo "1" > /proc/sys/net/ipv4/ip_dynaddr

#
# Enable simple IP Forwarding and Network Address Translation
#

$IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to-source $INET_IP

#
# Set default policies for the INPUT, FORWARD and OUTPUT chains
#

$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT DROP
$IPTABLES -P FORWARD DROP

#
# bad_tcp_packets chain
#
# Take care of bad TCP packets that we dont want.
#

$IPTABLES -N bad_tcp_packets
$IPTABLES -A bad_tcp_packets -p tcp ! --syn -m state --state NEW -j LOG
--log-prefix "New not syn:"
$IPTABLES -A bad_tcp_packets -p tcp ! --syn -m state --state NEW -j DROP

#
# Do some checks for obviously spoofed IPs
#

$IPTABLES -A bad_tcp_packets -i $INET_IFACE -s 192.168.0.0/16 -j DROP
$IPTABLES -A bad_tcp_packets -i $INET_IFACE -s 10.0.0.0/8 -j DROP
$IPTABLES -A bad_tcp_packets -i $INET_IFACE -s 172.16.0.0/12 -j DROP
$IPTABLES -A bad_tcp_packets -i $LAN_IFACE ! -s 192.168.0.0/16 -j DROP

#
# Bad TCP packets we dont want
#

$IPTABLES -A FORWARD -p tcp -j bad_tcp_packets

#
# Accept the packets we actually want to forward between interfaces.
#

$IPTABLES -A FORWARD -p tcp --dport 21 -i $LAN_IFACE -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 80 -i $LAN_IFACE -j ACCEPT
$IPTABLES -A FORWARD -p tcp --dport 110 -i $LAN_IFACE -j ACCEPT

$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -m limit --limit 3/minute --limit-burst 3 -j LOG
--log-level DEBUG --log-prefix "IPT FORWARD packet died: "


#
# Create separate chains for ICMP, TCP and UDP to traverse
#

$IPTABLES -N icmp_packets
$IPTABLES -N tcp_packets
$IPTABLES -N udpincoming_packets

#
# The allowed chain for TCP connections
#

$IPTABLES -N allowed
$IPTABLES -A allowed -p TCP --syn -j ACCEPT
$IPTABLES -A allowed -p TCP -m state --state ESTABLISHED,RELATED
-j ACCEPT
$IPTABLES -A allowed -p TCP -j DROP

#
# ICMP rules
#

# Changed rules totally
$IPTABLES -A icmp_packets -p ICMP -s 0/0 --icmp-type 8 -j ACCEPT
$IPTABLES -A icmp_packets -p ICMP -s 0/0 --icmp-type 11 -j ACCEPT

#
# TCP rules
#

$IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 21 -j allowed
$IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 22 -j allowed
$IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 80 -j allowed
$IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 113 -j allowed

#
# UDP ports
#

$IPTABLES -A udpincoming_packets -p UDP -s 0/0 --source-port 53 -j ACCEPT
$IPTABLES -A udpincoming_packets -p UDP -s 0/0 --source-port 123 -j ACCEPT
$IPTABLES -A udpincoming_packets -p UDP -s 0/0 --source-port 2074 -j ACCEPT
$IPTABLES -A udpincoming_packets -p UDP -s 0/0 --source-port 4000 -j ACCEPT

#
# INPUT chain
#
# Bad TCP packets we dont want
#

$IPTABLES -A INPUT -p tcp -j bad_tcp_packets

#
# Rules for incoming packets from anywhere
#

$IPTABLES -A INPUT -p ICMP -j icmp_packets
$IPTABLES -A INPUT -p TCP -j tcp_packets
$IPTABLES -A INPUT -p UDP -j udpincoming_packets

#
# Rules for special networks not part of the Internet
#

$IPTABLES -A INPUT -p ALL -i $LO_IFACE -s $LO_IP -j ACCEPT
$IPTABLES -A INPUT -p ALL -i $LO_IFACE -s $LAN_IP -j ACCEPT
$IPTABLES -A INPUT -p ALL -i $LO_IFACE -s $INET_IP -j ACCEPT
$IPTABLES -A INPUT -p ALL -d $INET_IP -m state --state ESTABLISHED,RELATED
-j ACCEPT
$IPTABLES -A INPUT -m limit --limit 3/minute --limit-burst 3
-j LOG --log-level DEBUG --log-prefix "IPT INPUT packet died: "

#
# OUTPUT chain
#
#
# Bad TCP packets we dont want
#

$IPTABLES -A OUTPUT -p tcp -j bad_tcp_packets


$IPTABLES -A OUTPUT -p ALL -s $LO_IP -j ACCEPT
$IPTABLES -A OUTPUT -p ALL -s $LAN_IP -j ACCEPT
$IPTABLES -A OUTPUT -p ALL -s $INET_IP -j ACCEPT
$IPTABLES -A OUTPUT -m limit --limit 3/minute --limit-burst 3
-j LOG --log-level DEBUG --log-prefix "IPT OUTPUT packet died: "
<<less
Download (MB)
Added: 2007-02-13 License: GPL (GNU General Public License) Price:
985 downloads
DMZ IP Firewall script

DMZ IP Firewall script


DMZ IP Firewall script project is a script for Linux 2.4.x and iptables. more>>
DMZ IP Firewall script project is a script for Linux 2.4.x and iptables.

Sample:

# Configuration options, these will speed you up getting this script to work with your own setup.

# your LANs IP range and localhost IP. /24 means to only use the first 24 bits of the 32 bit IP adress. the same as netmask 255.255.255.0

# STATIC_IP is used by me to allow myself to do anything to myself, might be a security risc but sometimes I want this. If you dont have a static IP, I suggest not using this option at all for now but its still enabled per default and will add some really nifty security bugs for all those who skips reading the documentation

LAN_IP="192.168.0.2"
LAN_BCAST_ADRESS="192.168.0.255"
LAN_IFACE="eth1"

INET_IP="194.236.50.152"
INET_IFACE="eth0"

HTTP_IP="194.236.50.153"
DNS_IP="194.236.50.154"
DMZ_HTTP_IP="192.168.1.2"
DMZ_DNS_IP="192.168.1.3"
DMZ_IP="192.168.1.1"
DMZ_IFACE="eth2"

LO_IP="127.0.0.1"
LO_IFACE="lo"


IPTABLES="/usr/local/sbin/iptables"
<<less
Download (MB)
Added: 2007-02-13 License: GPL (GNU General Public License) Price:
997 downloads
IPTables Firewall Script 0.1

IPTables Firewall Script 0.1


IPTables Firewall Script contains two example firewall scripts rc.firewall.iptables. more>>
IPTables Firewall Script contains two example firewall scripts "rc.firewall.iptables. Ive tried here to give some brief documentation for the IPTables firewall scripts contained in this directory. If youre not familiar with IPTables functionality and usage, then you may also want to check out some of the URLs listed at the top of the firewall scripts(HOWTOs, etc).

I hope you find these scripts useful, if you have any comments or suggestions please feel free to email me.



<<less
Download (0.43MB)
Added: 2006-07-07 License: GPL (GNU General Public License) Price:
1221 downloads

firewall security solution related searches

: firewall security solutions, netscreen firewall security solution, stanley security solutions, internet firewall security systems, security solutions, firewall security test, corporate security solutions, security solutions antivirus, firewall security policy, network security solution, symantec client firewall security antivirus, security firewall, security secrets solutions, firewall security scan, cps security solutions,
Firewall-1 Response 1.0

Firewall-1 Response 1.0


Firewall-1 Response is a Perl script for performing simple active responses based on a Checkpoint Firewall-1. more>>
Firewall-1 Response is a Perl script for performing simple active responses based on a Checkpoint Firewall-1. It is good for closing off your network against people who do port scans or network sweeps.

fw sam provides a command line interface to a limited feature-set of the firewall security policy. The purpose of this is to allow scripts such as this a way to dynamically change the security policy of one or more firewalls without administrator intervention. This should scare you, because of the potential of these changes allowing bad guys to run a DoS attack against you.
<<less
Download (0.029MB)
Added: 2006-07-12 License: GPL (GNU General Public License) Price:
1201 downloads
Firewall Tester 1.0

Firewall Tester 1.0


The Firewall Tester (FTester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) c more>>
The Firewall Tester (FTester) is a tool designed for testing firewalls filtering policies and Intrusion Detection System (IDS) capabilities.The tool consists of two perl scripts, a packet injector (ftest) and the listening sniffer (ftestd). The first script injects custom packets, defined in ftest.conf, with a signature in the data part while the sniffer listens for such marked packets. The scripts both write a log file which is in the same form for both scripts. A diff of the two produced files (ftest.log and ftestd.log) shows the packets that were unable to reach the sniffer due to filtering rules if these two scripts are ran on hosts placed on two different sides of a firewall. Stateful inspection firewalls are handled with the connection spoofing option. A script called freport is also available for automatically write to log files.
Of course this is not an automated process, ftest.conf must be crafted for every different situation. Examples and rules are included in the attached configuration file.
The IDS (Intrusion Detection System) testing feature can be used either with ftest only or with the additional support of ftestd for handling stateful inspection IDS, ftest can also use common IDS evasion techniques. Instead of using the configuration syntax currently the script can also process snort rule definition file.
These two scripts were written because I was tired of doing this by hand (with packet-crafting tools and tcpdump), I know that there are at least two dozens of other methods to do this but another reason was to learn some perl ;). I hope that you enjoy them.
Main features:
- firewall testing
- IDS testing
- simulation of real tcp connections for stateful inspection firewalls and IDS
- connection spoofing
- IP fragmentation / TCP segmentation
- IDS evasion techniques
<<less
Download (0.030MB)
Added: 2006-07-07 License: GPL (GNU General Public License) Price:
1206 downloads
Astaro Security Linux 7.5 Beta

Astaro Security Linux 7.5 Beta


Astaro Security Linux is an award-winning, unique network security solution in an integrated and easy-to-use and manage package. more>>
Astaro Security Linux 7.5 Beta offers you a wonderful and extremely useful product which is an award-winning, unique network security solution in an integrated and easy-to-use and manage package. Astaro Security Linux includes a combination of the following security applications:
  • A Firewall with stateful packet inspection and application proxies guards Internet communications traffic in and out of the organization.
  • A Virtual Private Network (VPN) gateway assures secure communications with remote offices, road warriors, and telecommuters.
  • Anti-Virus defends computers from both email and web-bourne viruses.
  • Intrusion Protection detects and stops hostile probes and application-based attacks.
  • Spam Filtering eliminates the productivity drain of opening and deleting unsolicited emails.
  • Surf Protection (Content Filtering) and Spyware Protection improve productivity by blocking inappropriate web activities, provide full protection from user tracking threats and violation of privacy.

Major Features:

  1. Protects all types of networks Windows, Linux, Unix and others.
  2. Delivers comprehensive features at low cost maximizing your ROI (return on investment).
  3. Highly effective. Has won numerous industry awards. Beat Cisco and Checkpoint in InfoWorld magazine product review, Beat IBM and Computer Associates in Linux World for Best Security Application.
  4. Integrated management platform features an intuitive browser-based interface and one-step updates for rapid deployment and easy management.
  5. Can be installed in under 15 minutes or purchased pre-installed on security appliances.
  6. Can start with firewall, VPN and spam protection and add other security applications as needed, seamlessly.
  7. Runs as a dedicated application server on top of a hardened operating system, which relieves operating system management headaches.
  8. Runs on systems ranging from small devices up to large multi-processor systems utilizing gigabytes of memory.
  9. Redundant systems can be configured to provide high availability and automatic failover in case of hardware or network failures.
  10. Load balancing improves performance - traffic shaping can set priorities by network, service and protocol.
  11. Logging, automatic backup, and diagnostic tools support high reliability.
  12. Free online evaluation workshop to get you started.

Enhancements:

  1. Major New Things:
    • Intrusion Protection Performance
    • Uses new version of the IPS engine
    • Scales massively when used with Multi-Core CPU/Appliances
    • Real-Time Bandwidth Monitor
    • New Interface utilization bars on Dashboard (setup scale via QOS)
    • Click for detailed overview as to "whats happening in my network right now"
    • Import/Export Widget
    • Gives the ability to work with manual lists for many features/fields
    • Useful to import a large blacklist (for example) into the URL Blacklist
    • Can been seen in many user-input boxes in Web, Mail and more. (Green Up/Down Arrows)
    • Clone Objects
    • Easily duplicate existing objects for quick re-use.
    • Supported in most places for many objects (Definitions, Services, Certain Profiles/Actions)
    • Extended Network Security Reporting
    • Added Detailed Packet Filter/Firewall Reports
    • Added Detailed IM/P2P Reports
    • Reputation Support for Web Security
    • Allows use of the trustedsource.org reputation for Web Filtering
    • Documentation coming, for now visit their site/FAQ for more info on reputations
    • DHCP Improvements
    • Automatically map a current lease to a static assignment
    • Limit DHCP leases to those with static assignments only
    • Configurable DHCP lease time
    • Servers retain configuration when enabled/disabled
    • Multicast Routing Daemon
    • PIM-SM Routing support
    • More documentation on this implementation to come. Experiment with it and if it solves your needs.
  2. Other New Things:
    • Windows SSL VPN Upgraded - New Client which supports X64 and many other options (download again via the UserPortal)
    • Improved HTTP Caching - Increases hit/usage rates and makes the cache more effective.
    • Quarantine/UserPortal Usability - Adds navigation to the bottom (supplementing the existing controls at the top), large amounts (250-1000) of displayed items per page, and sorting by subject line.
    • Default Definition for "Internet" - Allows to specify "Internet" as an object which will exclude internal network(s) to aid policy creation (0.0.0.0/0 on Gateway interface)
    • Customizable Shortcuts - Change the default Ctrl assignments to fit your preference
    • Improved Definition/Services Sidebar - Mouseover now instantly shows full name and extended info to aid identifying desired object for drag n drop.
    • User List shows static IPs - if assigned/configured (no need to edit in order to view)
    • Live Log Negation - use to filter live logs to not show lines that match "-" entries i.e. -test to remove lines containing "test"
    • Console/SSH Logins Trigger a notification - provides admin the needed insight when accessed.
    • Instant Email Backup - Button for every created backup file which allows it to be sent immediately via email to configured addresses
    • Custom text for notifications - Allows easier identification of which installation is sending the message. Especially useful if managing multiple sites using notifiers.
    • Test NTP Sync - Button to immediately poll the configured NTP server
    • Automatic Backup before Up2Date install
    • Configurable Default for Lists - Allows for the amount of items per page (Packet Filter Rules, or anywhere there is a number amounts drop down) to have a larger default view
    • Cluster/HA Serial Number View - Information on connected units made easier
    • Schedule Firmware Installation - When an Up2Date for Firmware is available, you can schedule it to auto-install at a certain time (not a recurring setting)
    • WebAdmin Network Section Split - Now two sections; "Network" and "Network Services" for usability.
    • Search Boxes Retain Data - No need to re-enter query when returning from a drill down/result click.
    • System Restart Reason - Allows logging of "why was system restarted" in the notification
    • Group Tool tips for Members - Easily discern Network/Service Group members without having to edit in order to view
    • Reporting Exclusions - Used to remove unwanted entries from various reports (such as Google-analytics from Web Security tables
    • Log Flag for NAT Rules - Similar to packet filter, tells you which NAT rule was matched as part of traffic handling
    • Masquerading for Additional IP Addresses - Allows the use of Masquerading (vs. just SNAT) for additional IPs bound to an interface
    • Support for Multiple Authentication Servers - The authentication server section has been redesigned to support fallback/failover in an easier format, with many usability improvements
    • SNMP MIB - Downloadable via the SNMP section of WebAdmin
    • Up2date Status Reworked - Clarifies the current status of a Firmware Up2date to avoid confusion regarding the availability, download progress etc...of an issued Up2date.
    • Inline/Snap Report Links - Directly moves the Admin to the relevant details report when browsing the embedded daily reports located throughout WebAdmin
    • Global POP3 Sender Blacklist - Quarantined as "other" in the QM/EUP
    • Dashboard RSS Feed - Provides visibility to select Astaro-issued items via WebAdmin
    • Other magic features, enhancements, and usability improvements
<<less
Download
Added: 2009-05-30 License: Free for non-commerc... Price: USD290.00
13 downloads
 
Other version of Astaro Security Linux

Astaro Security Linux 7.404

Astaro Security Linux 7.404winning, unique network security solution in. Astaro Security Linux includes a combination ... 15 minutes or purchased pre-installed on security appliances. Can start with firewall, VPN
Price: USD290.00
License:Free for non-commerc...
Download
1 downloads
Added: 2009-07-09

Astaro Security Linux 6.313

Astaro Security Linux 6.313security solution in an integrated and easy-to-use and manage package. 15 minutes or purchased pre-installed on security appliances. Can start with firewall, VPN
Price: USD290.00
License:Free for non
Download
1 downloads
Added: 2008-04-06

Astaro Security Linux 6.311

Astaro Security Linux 6.311Astaro Security Linux is an award-winning, unique network security solution in an integrated ... under 15 minutes or purchased pre-installed on security appliances. - Can start with firewall
Price: $290
License:Free for non-commercial use
Download (MB)
818 downloads
Added: 2007-08-01

Astaro Security Linux 5.210

Astaro Security Linux 5.210solution in an integrated and easy-to-use and manage package. Astaro Security Linux includes ... under 15 minutes or purchased pre-installed on security appliances. - Can start with firewall
Price: $290
License:Free for non-commercial use
Download (270MB)
1356 downloads
Added: 2006-02-09
Firewall by Jim 1.30

Firewall by Jim 1.30


Firewall by Jim is a firewall that takes advantage of tcp_wrappers information to block users. more>>
Firewall by Jim is a firewall that takes advantage of tcp_wrappers information to block users. I got tired of the firewall scripts out there not doing what I wanted them to.. I wanted a firewall that was flexible to use, but did its job. I wanted one that could be configured to any circumstance easily without changing the script itself. That is why I designed my firewall to use simple text files for configuration ease.

I have built in mutlple mean of protection into the firewall itself. Of the most notable is the hacker, trojan, spam, and blacklist capabilities.

The hacker protection will prevent the outside world from running unwanted commands. If you choose to enable this function.

The hacker protection will prevent the outside world from running unwanted commands. The trojan protection has two different levels. Standard and Intensive. The standard protection only protections from known linux and unix trojans. Where as the intensive will protect from all known trojans from windows, linux, and unix based.

The spam protection will block any IP address which is in list, from sending mail to your SMTP server.

The blacklist protection will block total communications to a site. I have also included a blacklist update script which will pull blacklist information from http://www.dshield.org .
<<less
Download (0.043MB)
Added: 2006-07-11 License: GPL (GNU General Public License) Price:
1202 downloads
Firewall and Proxy Server HOWTO 0.80

Firewall and Proxy Server HOWTO 0.80


Firewall and Proxy Server HOWTO project is designed to describe the basics of firewall systems. more>>
Firewall and Proxy Server HOWTO project is designed to describe the basics of firewall systems.

And also to give you some detail on setting up both a filtering and proxy firewall on a Linux based system.

Firewalls have gained great popularity as the ultimate in Internet Security.

Today firewalls are a part of almost every networking device. Like most hot subject they are also often misunderstood.

This HOWTO will go over the basics of what a firewall is and how to set one up.

I am using kernel 2.2.14 and RedHat 6.1 to develop this howto so the examples here are based on this distribution.

If you find differences in your distribution, please email me and Ill update this howto.
<<less
Download (MB)
Added: 2006-10-11 License: (FDL) GNU Free Documentation License Price:
1113 downloads
Firewall Admin 0.4

Firewall Admin 0.4


Firewall Admin is not a firewall generator. more>>
Firewall Admin is not a firewall generator. This tool allows network administrators to manage iptables rules from anywhere though a simple administration interface through a Web browser. Any user can put some extra plug-ins to interact with netfilter modules.
Main features:
- View rules of Filter, NAT and Mangle tables
- Create and delete chains
- Create, replace and delete rules (filter, nat and mangle)
- Modules: tcp, udp, icmp, limit, mac, multiport, state, iprange, string, owner, comment, quota, mport, time, dscp, ecn, pktype, connmark and random
- Packets/bytes counter
- Rename userchains
- Mangle targets: TOS, MARK and DSCP
- Up and Down rules
- Change policy (ACCEPT and DROP)
- Flush chains
- Configuration
- Backup and Restore firewall rules and chains
Enhancements:
- fixed userchains targets to support no targets (default: ACCEPT)
- ruleoptions directory was removed (performance impact)
- support for patch-o-matic modules comment and quota
- support for native modules mport, time, string, dscp, ecn, pktype and connmark
- support for native modules random
- packages/bytes counter support
- rename userchains
- added support to mangle targets: MARK and DSCP
- disabled notices in php
<<less
Download (0.056MB)
Added: 2006-07-12 License: GPL (GNU General Public License) Price:
1211 downloads
Ubuntu Security Notice Monitor 0.5

Ubuntu Security Notice Monitor 0.5


Ubuntu Security Notice Monitor is a karamba theme that displays the ten most recent USN report titles in a desktop widget. more>>
Ubuntu Security Notice Monitor is a karamba theme that displays the ten most recent USN report titles in a desktop widget.

Ubuntu Security Notice Monitor works by parsing the link text out of the USN page at http://www.ubuntulinux.org/usn using a Python backend.

Thanks goes to Richard "Ricardo" Szlachta for the graphics work.

<<less
Download (0.022MB)
Added: 2006-06-29 License: GPL (GNU General Public License) Price:
1219 downloads
Endian Firewall 2.1.2 Community

Endian Firewall 2.1.2 Community


Endian Firewall is a turn-key linux security distribution based on IPCop. more>>
Endian Firewall is a "turn-key" linux security distribution based on IPCop that turns every system into a full featured security appliance. Endian Firewall has been designed with "usability in mind" and is very easy to install, use and mange, without loosing its flexibility.
The features include a stateful packet inspection firewall, application-level proxies for variuos protocols (HTTP, POP3, SMTP) with antivirus support, virus and spamfiltering for email traffic (POP and SMTP), content filtering of Web traffic and a "hassle free" VPN solution (based on OpenVPN). The main advantage of Endian Firewall is that it is a pure "Open Source" solution that is commercially supported by Endian.
Main features:
Based Module:
- Firewall (statefull inspection)
- Outgoing Firewall
- IPSec Gateway to gateway VPN
- IPSec Remote client to gateway VPN (roadwarrior)
- NAT
- Multi-IP address support (aliases)
- Dynamic DNS
- DMZ support
- HTTPS Web Interface
- Detailed network traffic graphs
- View currently active connections
- Event log management
- Log redirection to external server
- Server DHCP
- Server NTP
- Traffic Shaping / QoS
- Transparent POP3 antivirus/antispam proxy
- Transparent HTTP proxy
- Web Proxy with local users, windows domain, samba, LDAP, radius server management
- Intrusion Detection System
- ADSL modem support
- Configuration backup and restore
- Remote update
Advanced Antivirus Module:
- HTTP Antivirus
- Endian Security Tools for Windows Desktop
- Transparent SMTP antivirus/antispam proxy
VPN Gateway Module:
- Gateway to gateway VPN with OpenVPN (http://openvpn.net/)
- Remote client to gateway VPN (roadwarrior) with OpenVPN (http://openvpn.net/)
- Bridged and Routed VPN mode
- Endian Client VPN ? Windows, Linux, MacOSX
Web Content Filter Module:
- URL filter
- Web content analysis/filter
- Whitelists and blacklists management
- Web surfing time limits
Enhancements:
- SATA support is now again working
- A wizard after installation asks to set the passwords (root, admin)
- Added possibility to restore a backup directly after installation
- Fix for blocking incoming connections coming in through the VPN [#210]
<<less
Download (110MB)
Added: 2007-07-12 License: GPL (GNU General Public License) Price:
875 downloads
Ciphire Mail Security Reports for Thunderbird 0.4.0

Ciphire Mail Security Reports for Thunderbird 0.4.0


Ciphire Mail Security Reports for Thunderbird is an extension for Mozilla Thunderbird which reads the X-Ciphire-Report header. more>>
Ciphire Mail Security Reports for Thunderbird is an extension for Mozilla Thunderbird (Version 1.0 or greater) which reads the X-Ciphire-Report header in incoming email messages.

Ciphire Mail Security Reports for Thunderbird marks Ciphire-protected and authenticated messages with graphical elements in the message header and the message thread pane.

<<less
Download (0.074MB)
Added: 2006-02-06 License: Free for non-commercial use Price:
1357 downloads
XML Security Library 1.2.10

XML Security Library 1.2.10


XML Security Library is a C library based on LibXML2. more>>
XML Security Library is a C library based on LibXML2.
The library supports major XML security standards:
- XML Signature
- XML Encryption
- Canonical XML (was included in LibXML2)
- Exclusive Canonical XML (was included in LibXML2)
XML Security Library is released under the MIT Licence see the Copyright file in the distribution for details.
<<less
Download (1.6MB)
Added: 2006-06-13 License: MIT/X Consortium License Price:
1228 downloads
Luke Macken Security LiveCD

Luke Macken Security LiveCD


Luke Macken Security LiveCD provides a fully functional livecd based on Fedora for use in security auditing, forensics research. more>>
Luke Macken Security LiveCD provides a fully functional livecd based on Fedora for use in security auditing, forensics research, and penetration testing.
Main features:
- All of the security features and tools Fedora has to offer
- Features from the FedoraLiveCD
- Ability to install directly to hard drive
Spinning your own
# yum install mercurial livecd-tools
$ hg clone http://hg.lewk.org/security-livecd
# livecd-creator --config security-livecd/fedora-security-livecd.ks --fslabel=Fedora-7-Security-LiveCD
Making changes to the LiveCD is as simple as modifying the fedora-security-livecd.ks configuration file.
<<less
Download (MB)
Added: 2007-08-09 License: GPL (GNU General Public License) Price:
813 downloads
FREE CompuSec PC Security Suite - Linux 4.18.1

FREE CompuSec PC Security Suite - Linux 4.18.1


Protects PC: Pre-boot authentication, encrypts full HDD, file, floppy &USB drive more>> FREE CompuSec is a suite of security solutions designed to completely protect desktops and notebooks. This software is a full version without any limitations and it is not a demo. The security functions that can be found in FREE CompuSec are listed below. Pre-boot Access Control requires you to enter your userID and password before the system will boot up.
Once authentication is completed, FREE CompuSec will automatically log you into the windows environment and provide a screen saver lock as well. Full Hard Disk Encryption using AES as the standard algorithm to keep your data safe. The intelligent program ensures fast encryption speeds that will minimize any effect on performance. A file encryption function is also included allowing users to secure exchange files via FTP, email attachements etc. Encryption of Floppy Disk and removable media (e.g USB thumb drives or HDD, firewire HDD etc) allows users to secure their data between their CompuSec protected PCs. Encryption of Server Files & Subdirectories - SafeLan, allows users to store and share encrypted files in a network. FREE CompuSec can be deployed as single user installation or centrally managed. With central management, the security definitions such as, password lifetime, encryption keys and user access rights can be defined centrally.
FREE CompuSec is Free from CE-Infosys. Other versions feature the use of e-Identity (a smart card or USB token) or Biometric fingerprint scanner that will complement your password and store your digital certificates, providing strong two-factor authentication and access control. FREE CompuSec can be upgraded at any time. A FREE CompuSec Window version can be downloaded @ http://www.ce-infosys.com/CeiNews_FreeCompuSec.asp
There is even Free CompuSec support at http://groups.yahoo.com/group/CompuSec<<less
Download (13.70MB)
Added: 2009-04-14 License: Freeware Price: Free
195 downloads
Secleted [ 0 ] software to compare
  • Page: 1 of 5
  • 1
  • 2
  • 3
  • 4
  • 5

firewall security solution in Related Categories

linux / System /

Networking
linux / Miscellaneous /

Security
linux / System /

Monitoring
linux / System /

Linux Distributions
linux / Programming /

Libraries
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above firewall security solution search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed