Free very easy software for linux

Very restrictive set of firewall rules script is a sample firewall for ip_tables, the tool for doing firewalling and masquerading under the 2.3.x/2.4.x series of kernels.

Be warned, this is a very restrictive set of firewall rules (and they should be, for proper security). Anything that you do not _specifically_ allow is logged and dropped into /dev/null, so if youre wondering why something isnt working, check /var/log/messages.

This is about as close as you get to a secure firewall. Its nasty, its harsh, and it will make your machine nearly invisible to the rest of the internet world. Have fun.

To run this script you must chmod 700 iptables-script and then execute it. To stop it from running, run iptables -F

Sample:

#Point this to your copy of ip_tables
IPT="/usr/local/bin/iptables"

#Load the module.
modprobe ip_tables

#Flush old rules, delete the firewall chain if it exists
$IPT -F
$IPT -F -t nat
$IPT -X firewall

#Setup Masquerading. Change the IP to your internal network and uncomment
#this in order to enable it.
#$IPT -A POSTROUTING -t nat -s 192.168.1.0/24 -j MASQUERADE
#$IPT -P FORWARD ACCEPT
#echo 1 > /proc/sys/net/ipv4/ip_forward

#Set up the firewall chain
$IPT -N firewall
$IPT -A firewall -j LOG --log-level info --log-prefix "Firewall:"
$IPT -A firewall -j DROP

#Accept ourselves
$IPT -A INPUT -s 127.0.0.1/32 -d 127.0.0.1/32 -j ACCEPT
#If youre using IP Masquerading, change this IP to whatever your internl
#IP addres is and uncomment it
#$IPT -A INPUT -s 192.168.1.1/32 -d 0/0 -j ACCEPT

#Accept DNS, cause its warm and friendly
$IPT -A INPUT -p udp --source-port 53 -j ACCEPT
$IPT -A INPUT -p tcp --source-port 113 -j ACCEPT
$IPT -A INPUT -p tcp --destination-port 113 -j ACCEPT

#Allow ftp to send data back and forth.
$IPT -A INPUT -p tcp ! --syn --source-port 20 --destination-port 1024:65535 -j ACCEPT

#Accept SSH. Duh.
#$IPT -A INPUT -p tcp --destination-port 22 -j ACCEPT

#Send everything else ot the firewall.
$IPT -A INPUT -p icmp -j firewall
$IPT -A INPUT -p tcp --syn -j firewall
$IPT -A INPUT -p udp -j firewall

Very Strange Tunneling Tool (VSST) is a multi-protocol tunneling tool. It accepts input by TCP stream sockets and FIFOs, and can send data via TCP, POP3, and ICMP tunneling.

HOW TO COMPILE

Run the following command:

OS | COMMAND
-----------------------
linux+bsd | make
solaris | make solaris[2]
other unix| try both :-)[1]

[1]: Give me root access to your box and I will port it. Im interested in porting vstt to Solaris x86, Solaris sparc, SGI IRIX, AIX, ...

[2]: Never tested since the hardware of my Solaris box is broken.

HOW TO INSTALL

Run make install

SiVeCo is a simple version control program. It is very easy to install and use, and has nearly no dependencies. This application is meant to be used for someone working alone on smaller projects, with contributors sending patches infrequently.
Enhancements:
- Bugs were fixed.
- The ability to export data to other SCMs was added, and an example for mercurial is included.

ferite is a lighweight, portable, threadsafe scripting engine with a language that is very easy to pick up and use.

ferite is a scripting engine and language written in c for complete portability.

ferite is a clean language with influences from various places: objects from Java/C++, functions from C/php, closures from scheme, block calling from ruby, namespaces from C++, as well as its own a sane loose typing mechanism, variant type and set of nice APIs.

Its origins are from one of those "it seems like a good idea", the good idea was provoked by finding perl a real pain in the arse to embed (from what I gather its easier nowadays). It started in the summer of 2000 (with various tries and fails within the pre-ceding two years). It reached version 1.0 in the second quarter of 2005.

myGuests is a guestbook written in PHP. It uses a simple textfile as storage, there is no need for a database server like mysql to use it. Ive started to develop myGuests in the year 2002 when database servers were only affordable for business applications. Using a simple textfile as storage made it possible for many people to install their own guestbook very easy.
Today I look back to three years of developing PHP applications for business use. I apologize for not releasing new open source projects in the past years, maybe there will be new things in the next months.
Main features:
- multi-language support (available languages: English, German, Dutch, Slovak)
- css support
- email notification
- email protection
- badwords filter
- admin-mode (delete&comment on entries)

Linbox Directory Server (LDS), along with the Linbox Management Console (LMC), is a powerful system that allows developers, system administrators, and other software vendors to manage users, groups, and their associated policies in an LDAP server.
Linbox Directory Server is highly ergonomic interface design makes it very easy to use, and delegation of administration enables medium size organization to adopt LDS.
Enhancements:
- New features and improvements include DNS/DHCP management and a Norwegian translation.
- The new DNS/DHCP module allows you to manage DNS zones and DHCP subnets for a typical LAN environment.

firefly is a firewall and QoS script for Linux netfilter. It is all-in-one and very easy to use. The configuration is cached and the firewall built in such a way that it can be rapidly rebuilt as a dial-up interface goes up and down (and the IP address changes).

There are two ways to install this software:


Automatically:
Run (as root) ./install.sh

Manually:
As root:
1. Copy firefly.cfg to /etc
2. Copy firefly.py to /usr/local/sbin
3. Copy firefly.8 to /usr/local/man/man8
4. Copy firefly.cfg.5 to /usr/local/man/man5