Free to protect software for linux

PeerProtect is an addon for Jays firewall that generates a file which contains all IP addresses from the RIAA and MPAA, etc. and will protect peer-to-peer programs from them. The Database can be copied from PEERGUARDIAN or IPPREFIX.

protector scans e-mail attachments in order to identify those that could (by nature of their type) contain viruses or other undesirable content, and replaces them with a warning message. Protector is designed to be used on a unix mail gateway server MS Windows clients by way of a POP3 service. Typically, protector blocks DOS or Windows executables, DLLS etc Files with double extensions like "picture.gif.exe" Visual basic (VB) scripts Word documents that contain macros unrecognised file types ... etc ...

Protector is NOT a virus scanner in the traditional sense: It does NOT scan attachments for virus signatures, but blocks or edits attachments that could contain viruses. So *.exe, *.vba etc attachments dont get through. This means that you dont have to keep protector up to date to stay protected against the growing tide of new viruses and worms.

Protector does not work by blocking listed types, but by blocking a set of listed types.

The logic employed by protector to determine the file types contained in attachments is based on a modified version of the "file" command, and a number of type-specific validation programs - it does not rely on the actual name of the file, or the "content-type" declared in the attachment header. It also looks inside ZIP, TAR and other archive formats, and checks the files contained in them.

Some types of files are allowed through only under certain conditions. The main example being that MS Word documents are blocked if they contain ANY macros, but allowed through otherwise.

Protector grew out of a need to protect a small network that I manage in my spare time from the dangers of e-mail borne viruses and trojans. A number of installations exist round the world and feed back from users has allowed me to improve the system - in terms of reliability, performance, ease of use and the breadth of file types "allowed through". Development is still underway, and a new release will be available shortly that allows a far larger set of file types through, allows scripts to be removed from attachments (eg: JavaScript can be removed from HTML files), and is significantly easier to tailor.

Constructive critisism is warmly invited

The Ur-Quan Masters is a port of the 3DO version of the classic space game StarControl II.

The game is currently fully playable, though it crashes or locks every now and then. The play experience is also far from perfect; many graphical and control glitches remain to be fixed.

That said, its possible to get all the way to the final battle if you save often to protect against the occasional crash.

SwitchProxy Tool is a Firefox extension which lets you manage and switch between multiple proxy configurations quickly and easily.

You can also use it as an anonymizer to protect your computer from prying eyes.

NOTE: In Firefox you can use the toolbar element to save space

anti_offline_browser.php is a script to protect your site against offline browsers that produce too much traffic. It uses basic user-agent detection and hits-per-second-rate to detect offline browsers. Seach engine bots are detected using an IP-based whitelist.
At first, you should edit the variables on the config-section of the php-file. After that, copy the files to your web-directory and as last step, include the script on your website-files, so it is executed on top of every page of your site. (or just sites you wanna protect)
You can edit by yourself the error-page.
Enhancements:
- rewrite of user agent validation:
- until now, i use a blacklist file for user agents and user agents are only validated on the first visit (this will save some cpu/ram)
- session will be started if no active session was found
- some bug fixes

Yet Another Free PDF-composer can compose PDF documents from picture files and other PDF files, encrypt the created document, and send it to a given email address.
Imagine you need a PDF-printer-like tool, which is able to generate PDF-files from documents, you want print out of your applications on your local machine.
There are plenty of solutions out there on the web, which can do this for you. Now imagine you need a PDF-printer to be shared in your network, which is able to generate PDF-files from documents, the network users print out of their applications.
Youll find some free solutions, which can make this. Further imagine, you want this PDF-printer automatically to apply the letterhead template of your company to the first page, apply the company-logo to all further pages, append a "Terms and Conditions" page to all printed documents, apply some "Watermark Graphic" on all pages to copy-protect your documents, encrypt the document to protect it from unwanted manipulation and automatically mail the document to the user, who initiated the print-job.
Hard to find a free solution on the web, which can do this for you.
Enhancements:
- This is a general code cleanup and feature enhancement release.
- YAFPC uses iText 1.4.4 now and requires Java 1.5 or above.
- Feature enhancements include a large variety of encryption settings, explicit settings for owner and user passwords, and enhanced processing of paper sizes and orientations.

Arnos IPTABLES firewall script was initially written because I needed to protect my single-homed Linux machine at work. I wrote it at the time I couldnt find any script that really satisfied my needs except for one that was written by a guy called Seven.
I helped him for several months with the work on his script by suppling patches, reporting bugs etc. In this period I was fortunately also able to master scripting for iptables myself because soon Seven discontinued his work, I never got to even talk to the guy ever again. At that point I decided to continue his work, or actually I started my own branch based on his script.
In the summer of 2002 I finally got an ADSL connection at home. Initially I used the iptables firewall that came with the great ADSL4LINUX-package (http://www.adsl4linux.nl). But it didnt take me long to come to the conclusion that their iptables firewall lacked important features like port-forwarding and flexbility with "trusted hosts" etc.
I also didnt like the fact that I had to use a different firewall for my home machine and the machine at work. This made me decide to use some of the ADSL4LINUX knowledge to implement ADSL support.
By now (about 1 year later as of writing) there are only few remnants left of Sevens original script and many, many, many improvements were applied. One major improvement is the ADSL and NAT support (Check the features page with the specifiations of my firewall). For version 2 (alpha) I plan to completely rewrite to script to make it more flexible and to increase the usability for others.
Main features:
- Very secure stateful filtering firewall
- Both kernel 2.4 & 2.6 support
- It can be used for both single- and multi(eg. dual)-homed boxes
- Masquerading (NAT) and SNAT support
- Multiple external (internet) interfaces
- Support multiroute NAT & SNAT (load balancing over multiple (internet) interfaces)
- Port forwarding (NAT)
- Support MAC address filtering
- Support for DSL/ADSL modems
- Support for PPPoE, PPPoA and bridging modem setups
- Support for static and ISP assigned (DHCP) IPs
- Support for (transparent) proxies
- Full support for DMZs and DMZ-2-LAN forwarding. You can also use it to isolate your eg. wireless LAN.
- (Nmap)(stealth) portscan detection
- Protection against SYN-flooding (DoS attacks)
- Protection against ICMP-flooding (DoS attacks)
- Extensive user-definable logging with rate limiting to prevent log flooding
- Includes options to optimize your throughput
- User definable open ports, closed ports, trusted hosts, blocked hosts etc.
- Log & protection options are both highly customizable
- Support for custom iptables rules in a seperate file
- It can be used with chkconfig runlevel system (eg. RedHat/Fedora)
- Main focus on TCP/UDP/ICMP but additional support for *ALL* IP protocols
- It works with Freeswan IPSEC (VPN) & SSH Sentinel (http://www.freeswan.org) (+virtual IPs)
- It works with PoPTop PPTP (http://www.poptop.org)
- It works with UPnP
- DRDOS protection/detection (experimental)
- Its easy to configure
- And much more.
Enhancements:
- This release fixes a nasty bug in the NAT forwarding rules that caused using subnet-source-restrictions not to work.
- It adds an extra rule to the DHCP server section to allow packets from DHCP servers in the same segment.
- There are several plugin updates.
- A Racoon IPSEC VPN plugin and a transparent DNAT plugin have been added.