Free php firewall generator software for linux

The PHP Firewall Generator is a simple PHP script that generates a firewall script for iptables or ipchains based firewalls. The script is created based on configuration rules entered by the user. The aim is to support a rule set similar to those supported by commercial Firewall systems, and make it easy to configure.

Make sure that you have apache and PHP installed (tested with apache-1.3.19-5 and php-4.0.4 from Red Hat 7.1 but shouldwork with others).

Make sure that PHP is actually running.
Make sure that you have iptables installed. Tested with iptables-1.2.1a-1 from Red Hat 7.1
Run this as root:
make install
If you dont have make installed on your system, then you could just run:
installme
Make sure that the files in /var/www/html/phpfwgen/ are readable by the HTTP daemon user (often httpd or apache) and that the files in /var/lib/phpfwgen are readable AND writeable by this user.
The script gets copied into /var/www/html/phpfwgen/ so you should be able to access it as http:// /phpfwgen/
Make sure that the files created in /var/lib/phpfwgen make sense, particularly the "interfaces" file.

PacketFlow Firewall Generator is an XML based firewall generator. It takes an XML configuration file that defines the firewall policy and generates a list of iptables commands to implement this policy. It is primarily intended for use on dedicated firewalls, but it can be used in other scenarios. It makes dealing with many interfaces easy.
PacketFlow works on the concept of interface "security levels." New connections are allowed to flow down hill from interfaces with a high security level to interfaces with a low security level. This approach tends to make rule sets much shorter, even with many interfaces.
Access lists allow you to override the default behavior of the security levels. Access lists are defined between interfaces. There is also support for incoming, outgoing, and wildcard access lists. Wildcard access lists allow you to easily allow new connections to a particular service from any interface. Access lists are applied only to "new" connections, and once a connection has been established, you no longer need to deal with it specifically.
The first thing to do is evaluate what you need your firewall to do. This is probably the most important part. Once you know what you are trying to accomplish, study the samples in the samples directory of this distribution. There are many configurations for this software, and one is likely to give you a place to start.
Once you have a configuration, you need to generate the rules from it. This is done by running the packetflow program with the file name as its argument. For now, it sends the rules to STDOUT, so probably want to redirect them into a file.
Enhancements:
- This version no longer uses the unclean match, because it isnt available in kernel 2.6.
- The Debian packages have been updated to work correctly with newer releases, and the version has been updated to 1.0.

Easy Firewall Generator for IPTables simply generate script for setting iptables. Advantage is its simplicity, because this program is written in PHP.
I have generalized it to include a number of features that are commonly used, but it is targeted at single computers or gateways for small private networks. Its designed to easily generate a full-featured iptables configuration script with a variety of the most commonly desired options.
This program is written in PHP. You can use the installation here, or download the source and use or modify it yourself. Its licensed under the GPL, but if you have any useful modifications or suggestions, please send them to me at scott at morizot dot net.
Enhancements:
- Added rule to do ingress filtering as suggested by Brian Buchanan
- Changed the rule to drop broadcasts that would otherwise be dropped to a better rule als suggested by Brian Buchanan
- Added rules in bad_tcp_packets to filter packets with illegal tcp flag combinations. This will lock many stealth scans.
- Added the option to support inbound mDNSResponder.

IPCop project implements existing technology, secure programming practices and outstanding new concepts to make it the Linux Distribution for protecting single home computers, to large corporate networks from intrusions and attacks.

Whether for your home, or SOHO, IPCop will scale to fit your needs. IPCop has even been rumoured to be implemented and protecting larger, more complex networks too. See the IPCop MissionStatement for more information on our goals.

SRG is a Squid Report Generator designed for the needs of CRCnet. None of the existing report generators could provide the exact solution that we required and we decided to start from scratch rather than trying to modify an existing progamme.
SRG is designed to be fast and easy to integrate in to other authentication systems (such as those that are driving Squid itself).
Main features:
- PHP Output with built in authentication hooks
- Fast Processing
- Reporting right down the the location vistied
Enhancements:
- Fixed assertion failure when output directory contains a subdirectory with an invalid name.
- Fixed compilation problems on sparc64. Endianess problems.
- Fixed bug with localtime using a static buffer (or similar) which caused the Period to be misreported as firstdate - firstdate.
- Marked -A, -c, -D, -e, -L, -p, -P and -T as deprecated. See FAQ for details.
- Added option (-r) to allow sorting output reports by any column via javascript
- Added meta tags to prevent indexing of reports by robots
- Minor stylesheet updates
- SRG now defaults to generating location reports
- SRG now defaults to showing the requesting host in location reports
- -H is now used only to specify whether DNS lookups should be performed
- Fix some minor output formatting errors reported by Guiliano Cioffi
- Added some example scripts for generating SRG reports
- Added basic debian package

Simple Firewall is a easy tool for administration users and access control. This tool is made for Linux. Using iptables for packet filtering Write in perl Save rules with xml. That can be run in bash shell and web interface via webmin.
Enhancements:
- Perform reconfigure squid conf for all linux distros
- Fix script init for all linux distros
- Add new menu vpn
- Implemet and integrated PPTP VPN Software
- Modified install script

NetMap Generator is a project used to generate a graphical map of your connection with the Internet.

It first uses traceroute to make a list of all routers and their interconnections, after which it generates a .dot file.

You need the Dotty program to view the graphical representation of you network.

IDMS Firewall is an easy to use firewall configuration script, featuring statefull connection tracking, bandwidth limiting and bandwidth logging.
To install and run the firewall type these commands:
1. Firstly untgz the package, look in the kernel/ & iptables/ dir apply those patches to the kernel & iptabes respectively (IPTables is included btw), re-compile, install & carry on
below...
2. Copy an example config file out of examples/ into the top IDMS Firewall directory & rename it to firewall.conf
3. Edit firewall.conf to suite your preference
4. Run ./start_firewall
5. Watch your system log to see if there was anything you left out in the firwall config file.
Enhancements:
- start_firewall: * Added DONTWRITE variable, so we dont HAVE TO touch the kernel table