water filtering systems
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 7826
Packet filtering setup script
Packet filtering setup script by Anthony C. Zboralski. more>>
Packet filtering setup script by Anthony C. Zboralski. Adapted by Didi Damian for iptables version 1.0.0
Sample:
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Set up variables
EXT_IF="eth0"
INT_IF="eth1"
EXT_IP=24.x.x.x/32
INT_IP=192.168.0.1/32
EXT_NET=24.x.x.0/24
INT_NET=192.168.0.0/24
MASQ_NETS="192.168.0.0/24"
LOCAL_ADDRS="127.0.0.0/8 192.168.0.1/32 24.x.x.x/32"
MAIL_RELAY=24.x.x.x/32
SMB_ACCESS="192.168.0.2/32"
SMB_BCAST="192.168.0.255/32"
# Turn on IP forwarding
echo Turning on IP forwarding.
echo 1 > /proc/sys/net/ipv4/ip_forward
# Load the ip_tables module
echo Loading ip_tables module.
/sbin/modprobe ip_tables || exit 1
# I let the kernel dynamically load the other modules
echo Flush standard tables.
iptables --flush INPUT
iptables --flush OUTPUT
iptables --flush FORWARD
echo Deny everything until firewall setup is completed.
iptables --policy INPUT DROP
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP
CHAINS=`iptables -n -L |perl -n -e /Chains+(S+)/ && !($1 =~ /^(INPUT|FORWARD|OUTPUT)$/) && print "$1 "`
echo Remove remaining chains:
echo $CHAINS
for chain in $CHAINS; do
iptables --flush $chain
done
# 2nd step cause of dependencies
for chain in $CHAINS; do
iptables --delete-chain $chain
done
for net in $MASQ_NETS; do
# I delete all the rules so you can rerun the scripts without bloating
# your nat entries.
iptables -D POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE 2>/dev/null
iptables -A POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE || exit 1
done
iptables --policy FORWARD ACCEPT
# Create a target for logging and dropping packets
iptables --new LDROP 2>/dev/null
iptables -A LDROP --proto tcp -j LOG --log-level info
--log-prefix "TCP Drop "
iptables -A LDROP --proto udp -j LOG --log-level info
--log-prefix "UDP Drop "
iptables -A LDROP --proto icmp -j LOG --log-level info
--log-prefix "ICMP Drop "
iptables -A LDROP --proto gre -j LOG --log-level info
--log-prefix "GRE Drop "
iptables -A LDROP -f -j LOG --log-level emerg
--log-prefix "FRAG Drop "
iptables -A LDROP -j DROP
# Create a table for watching some accepting rules
iptables --new WATCH 2>/dev/null
iptables -A WATCH -m limit -j LOG --log-level warn --log-prefix "ACCEPT "
iptables -A WATCH -j ACCEPT
echo Special target for local addresses:
iptables --new LOCAL 2>/dev/null
echo $LOCAL_ADDRS
for ip in $LOCAL_ADDRS; do
iptables -A INPUT --dst $ip -j LOCAL
# iptables -A INPUT --src $ip -i ! lo -j LDROP # lame spoof protect
done
echo Authorize mail from mail relay.
iptables -A LOCAL --proto tcp --syn --src $MAIL_RELAY --dst $EXT_IP --dport 25 -j ACCEPT
echo Authorizing samba access to:
echo $SMB_ACCESS
iptables --new SMB 2>/dev/null
for ip in $SMB_ACCESS; do
iptables -A SMB -s $ip -j ACCEPT
done
iptables -A LOCAL --proto udp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 445 -j SMB
iptables -A INPUT -i ! $EXT_IF --dst $SMB_BCAST -j ACCEPT #lame samba broadcast
echo Drop and log every other incoming tcp connection attempts.
iptables -A LOCAL -i ! lo --proto tcp --syn --j LDROP
echo Authorize dns access for local nets.
for net in $MASQ_NETS 127.0.0.0/8; do
iptables -A INPUT --proto udp --src $net --dport 53 -j ACCEPT
done
echo Enforcing up ICMP policies, use iptables -L ICMP to check.
# If you deny all ICMP messages you head for trouble since it would
# break lots of tcp/ip algorythm (acz)
iptables --new ICMP 2>/dev/null
iptables -A INPUT --proto icmp -j ICMP
iptables -A ICMP -p icmp --icmp-type echo-reply -j ACCEPT
iptables -A ICMP -p icmp --icmp-type destination-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type protocol-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type port-unreachable -j ACCEPT
iptables -A ICMP -p icmp --icmp-type fragmentation-needed -j LDROP
iptables -A ICMP -p icmp --icmp-type source-route-failed -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type network-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type communication-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-precedence-violation -j LDROP
iptables -A ICMP -p icmp --icmp-type precedence-cutoff -j LDROP
iptables -A ICMP -p icmp --icmp-type source-quench -j LDROP
iptables -A ICMP -p icmp --icmp-type redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type echo-request -j WATCH
iptables -A ICMP -p icmp --icmp-type router-advertisement -j LDROP
iptables -A ICMP -p icmp --icmp-type router-solicitation -j LDROP
iptables -A ICMP -p icmp --icmp-type time-exceeded -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-transit -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-reassembly -j WATCH
iptables -A ICMP -p icmp --icmp-type parameter-problem -j WATCH
iptables -A ICMP -p icmp --icmp-type ip-header-bad -j WATCH
iptables -A ICMP -p icmp --icmp-type required-option-missing -j WATCH
iptables -A ICMP -p icmp --icmp-type timestamp-request -j LDROP
iptables -A ICMP -p icmp --icmp-type timestamp-reply -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-request -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-reply -j LDROP
iptables -A ICMP -p icmp -j LDROP
echo Authorize tcp traffic.
iptables -A INPUT --proto tcp -j ACCEPT
echo Authorize packet output.
iptables --policy OUTPUT ACCEPT
#echo reject ident if you drop em you gotta wait for timeout
#iptables -I LOCAL --proto tcp --syn --dst $EXT_IP --dport 113 -j REJECT
echo Drop and log all udp below 1024.
iptables -A INPUT -i ! lo --proto udp --dport :1023 -j LDROP
echo Drop rpc dynamic udp port:
RPC_UDP=`rpcinfo -p localhost|perl -n -e /.*udps+(d+)s+/ && print $1,"n"|sort -u`
echo $RPC_UDP
for port in $RPC_UDP; do
iptables -A LOCAL -i ! lo --proto udp --dport $port -j LDROP
done
echo Authorize udp above 1024.
iptables -A INPUT --proto udp --dport 1024: -j ACCEPT
<<lessSample:
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Set up variables
EXT_IF="eth0"
INT_IF="eth1"
EXT_IP=24.x.x.x/32
INT_IP=192.168.0.1/32
EXT_NET=24.x.x.0/24
INT_NET=192.168.0.0/24
MASQ_NETS="192.168.0.0/24"
LOCAL_ADDRS="127.0.0.0/8 192.168.0.1/32 24.x.x.x/32"
MAIL_RELAY=24.x.x.x/32
SMB_ACCESS="192.168.0.2/32"
SMB_BCAST="192.168.0.255/32"
# Turn on IP forwarding
echo Turning on IP forwarding.
echo 1 > /proc/sys/net/ipv4/ip_forward
# Load the ip_tables module
echo Loading ip_tables module.
/sbin/modprobe ip_tables || exit 1
# I let the kernel dynamically load the other modules
echo Flush standard tables.
iptables --flush INPUT
iptables --flush OUTPUT
iptables --flush FORWARD
echo Deny everything until firewall setup is completed.
iptables --policy INPUT DROP
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP
CHAINS=`iptables -n -L |perl -n -e /Chains+(S+)/ && !($1 =~ /^(INPUT|FORWARD|OUTPUT)$/) && print "$1 "`
echo Remove remaining chains:
echo $CHAINS
for chain in $CHAINS; do
iptables --flush $chain
done
# 2nd step cause of dependencies
for chain in $CHAINS; do
iptables --delete-chain $chain
done
for net in $MASQ_NETS; do
# I delete all the rules so you can rerun the scripts without bloating
# your nat entries.
iptables -D POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE 2>/dev/null
iptables -A POSTROUTING -t nat -s $MASQ_NETS -j MASQUERADE || exit 1
done
iptables --policy FORWARD ACCEPT
# Create a target for logging and dropping packets
iptables --new LDROP 2>/dev/null
iptables -A LDROP --proto tcp -j LOG --log-level info
--log-prefix "TCP Drop "
iptables -A LDROP --proto udp -j LOG --log-level info
--log-prefix "UDP Drop "
iptables -A LDROP --proto icmp -j LOG --log-level info
--log-prefix "ICMP Drop "
iptables -A LDROP --proto gre -j LOG --log-level info
--log-prefix "GRE Drop "
iptables -A LDROP -f -j LOG --log-level emerg
--log-prefix "FRAG Drop "
iptables -A LDROP -j DROP
# Create a table for watching some accepting rules
iptables --new WATCH 2>/dev/null
iptables -A WATCH -m limit -j LOG --log-level warn --log-prefix "ACCEPT "
iptables -A WATCH -j ACCEPT
echo Special target for local addresses:
iptables --new LOCAL 2>/dev/null
echo $LOCAL_ADDRS
for ip in $LOCAL_ADDRS; do
iptables -A INPUT --dst $ip -j LOCAL
# iptables -A INPUT --src $ip -i ! lo -j LDROP # lame spoof protect
done
echo Authorize mail from mail relay.
iptables -A LOCAL --proto tcp --syn --src $MAIL_RELAY --dst $EXT_IP --dport 25 -j ACCEPT
echo Authorizing samba access to:
echo $SMB_ACCESS
iptables --new SMB 2>/dev/null
for ip in $SMB_ACCESS; do
iptables -A SMB -s $ip -j ACCEPT
done
iptables -A LOCAL --proto udp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 135:139 -j SMB
iptables -A LOCAL --proto tcp -i ! $EXT_IF --dport 445 -j SMB
iptables -A INPUT -i ! $EXT_IF --dst $SMB_BCAST -j ACCEPT #lame samba broadcast
echo Drop and log every other incoming tcp connection attempts.
iptables -A LOCAL -i ! lo --proto tcp --syn --j LDROP
echo Authorize dns access for local nets.
for net in $MASQ_NETS 127.0.0.0/8; do
iptables -A INPUT --proto udp --src $net --dport 53 -j ACCEPT
done
echo Enforcing up ICMP policies, use iptables -L ICMP to check.
# If you deny all ICMP messages you head for trouble since it would
# break lots of tcp/ip algorythm (acz)
iptables --new ICMP 2>/dev/null
iptables -A INPUT --proto icmp -j ICMP
iptables -A ICMP -p icmp --icmp-type echo-reply -j ACCEPT
iptables -A ICMP -p icmp --icmp-type destination-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type protocol-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type port-unreachable -j ACCEPT
iptables -A ICMP -p icmp --icmp-type fragmentation-needed -j LDROP
iptables -A ICMP -p icmp --icmp-type source-route-failed -j WATCH
iptables -A ICMP -p icmp --icmp-type network-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type host-unknown -j WATCH
iptables -A ICMP -p icmp --icmp-type network-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-network-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type TOS-host-unreachable -j WATCH
iptables -A ICMP -p icmp --icmp-type communication-prohibited -j WATCH
iptables -A ICMP -p icmp --icmp-type host-precedence-violation -j LDROP
iptables -A ICMP -p icmp --icmp-type precedence-cutoff -j LDROP
iptables -A ICMP -p icmp --icmp-type source-quench -j LDROP
iptables -A ICMP -p icmp --icmp-type redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-network-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type TOS-host-redirect -j LDROP
iptables -A ICMP -p icmp --icmp-type echo-request -j WATCH
iptables -A ICMP -p icmp --icmp-type router-advertisement -j LDROP
iptables -A ICMP -p icmp --icmp-type router-solicitation -j LDROP
iptables -A ICMP -p icmp --icmp-type time-exceeded -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-transit -j WATCH
iptables -A ICMP -p icmp --icmp-type ttl-zero-during-reassembly -j WATCH
iptables -A ICMP -p icmp --icmp-type parameter-problem -j WATCH
iptables -A ICMP -p icmp --icmp-type ip-header-bad -j WATCH
iptables -A ICMP -p icmp --icmp-type required-option-missing -j WATCH
iptables -A ICMP -p icmp --icmp-type timestamp-request -j LDROP
iptables -A ICMP -p icmp --icmp-type timestamp-reply -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-request -j LDROP
iptables -A ICMP -p icmp --icmp-type address-mask-reply -j LDROP
iptables -A ICMP -p icmp -j LDROP
echo Authorize tcp traffic.
iptables -A INPUT --proto tcp -j ACCEPT
echo Authorize packet output.
iptables --policy OUTPUT ACCEPT
#echo reject ident if you drop em you gotta wait for timeout
#iptables -I LOCAL --proto tcp --syn --dst $EXT_IP --dport 113 -j REJECT
echo Drop and log all udp below 1024.
iptables -A INPUT -i ! lo --proto udp --dport :1023 -j LDROP
echo Drop rpc dynamic udp port:
RPC_UDP=`rpcinfo -p localhost|perl -n -e /.*udps+(d+)s+/ && print $1,"n"|sort -u`
echo $RPC_UDP
for port in $RPC_UDP; do
iptables -A LOCAL -i ! lo --proto udp --dport $port -j LDROP
done
echo Authorize udp above 1024.
iptables -A INPUT --proto udp --dport 1024: -j ACCEPT
Download (MB)
Added: 2007-02-14 License: GPL (GNU General Public License) Price:
984 downloads
The Plastic File System 1.11
The Plastic File System is a module for providing virtual file systems in user space. more>>
The Plastic File System project is an LD_PRELOAD module for manipulating what the file system looks like for programs. This allows virtual file systems to exist in user space, without kernel hacks or modules.
PlasticFS includes the following file systems:
chroot
The chroot filter may be used to simulate the effects of the chroot(2) system call, in combination with other filters.
dos
The dos filter may be used to simulate an 8.3 DOS file system.
log
The log filter may be used to transparently log file system access, similar to the strace command.
shortname
The shortname filter may be used to simulate file systems with shorter filenames.
smartlink
The smartlink filter may be used to expand environment variables in symbolic links, using the usual $name notation.
upcase, downcase, titlecase and nocase
The upcase filter to make file names appear to be in upper-case when listed. File names are case- insensitive when being opened, etc. The downcase filetr is similar, except it converts to lower-case, titlecase capitalizes, and nocase is simply case insensitive without altering the filenames.
viewpath
The viewpath filter may be used to make a set of directory trees look like a single directory tree. (Also known as a union file system.) All modifications take place in the first directory in the list.
Aka: union and translucent
Note: Filters may be piped from one to the next, forming powerful combinations.
PlasticFS is currently dependent on the implementation of the GNU C Library. It is self configuring using a GNU Autoconf generated configure script.
Enhancements:
- Build problem fixed.
<<lessPlasticFS includes the following file systems:
chroot
The chroot filter may be used to simulate the effects of the chroot(2) system call, in combination with other filters.
dos
The dos filter may be used to simulate an 8.3 DOS file system.
log
The log filter may be used to transparently log file system access, similar to the strace command.
shortname
The shortname filter may be used to simulate file systems with shorter filenames.
smartlink
The smartlink filter may be used to expand environment variables in symbolic links, using the usual $name notation.
upcase, downcase, titlecase and nocase
The upcase filter to make file names appear to be in upper-case when listed. File names are case- insensitive when being opened, etc. The downcase filetr is similar, except it converts to lower-case, titlecase capitalizes, and nocase is simply case insensitive without altering the filenames.
viewpath
The viewpath filter may be used to make a set of directory trees look like a single directory tree. (Also known as a union file system.) All modifications take place in the first directory in the list.
Aka: union and translucent
Note: Filters may be piped from one to the next, forming powerful combinations.
PlasticFS is currently dependent on the implementation of the GNU C Library. It is self configuring using a GNU Autoconf generated configure script.
Enhancements:
- Build problem fixed.
Download (0.18MB)
Added: 2007-07-08 License: GPL (GNU General Public License) Price:
840 downloads
Content Filtering Proxy SafeSquid 4.2.2.RC8.9
Content filtering proxy server - BROWSER BASED INTERFACE, VERY FAST THROUGHPUT, DNS CACHING, CONTENT CACHING, PREFETCHING, BANDWIDTH CONTROL, VIRUS SCAN, WEB FILTERING, REAL-TIME TEXT & IMAGE ANALYSIS more>>
SafeSquid is a Content Filtering Proxy Server. SafeSquid has a BROWSER BASED INTERFACE. SafeSquid offers arguably, worlds biggest set of Content Filtering features.
SafeSquids multi-threaded architecture, delivers industrys FASTEST THROUGHPUT, even while providing extreme content analysis and security. SafeSquid has an intelligent DNS cache, an extremely manageable content CACHING system, and configurable content pre-fetching that allows fast browsing of often viewed web-sites.
SafeSquid lets you create unlimited and extremely granular Internet Policies to define and deal with unlimited number of unique factors depending upon user / network / web-site / mime-type / size / time etc. SafeSquid allows you to create unlimited number of policies for allowing or BLOCKING SPECIFIC CONTENT, like music, ActiveX, JavaScripts, advertisement banners, etc., and even any part of the protocol header to ensure graded exchange of private information, from each web-site. Real-time text analysis and Image analysis besides categorized web-site databases ensure complete blocking of PORNOGRAPHY or replacing specific parts.
Users can be authenticated from a remote WINDOWS ADS / OpenLDAP servers. SafeSquid lets you, to THROTTLE SPEED for low priority users or applications. You can use a variety of ANTIVIRUS Software like ClamAV and any other ICAP based antivirus to stop viruses before they reach the client systems. SafeSquid allows you to customize the various templates, that are displayed when access or content is denied to the user. SafeSquids logs can be analyse to create a exhaustive USER ACTIVITY REPORTS.
It takes less than 3 minutes to install SafeSquid on a Linux based server. SafeSquid is backed by a very responsive and committed customer support. SUPPORT INCLUDES REMOTE LIVE-HAND-HOLDING. Various SafeSquid editions are available to serve small 20 user networks or thousands of concurrent users. SafeSquid has special features for use in CLUSTERS.
Requirements: Linux, kernel 2.6 or higher
Whats new in this version: http://www.safesquid.com/html/viewforum.php?f=293
<<less Download (1.04MB)
Added: 2009-04-09 License: Freeware Price: $0.00
204 downloads
Content Filtering Proxy SafeSquid 4.2.2.RC8.2
CONTENT FILTERING PROXY SERVER, WEB FILTER, INTERNET FILTER, REAL-TIME FILTER more>> SafeSquid is a Content Filtering Proxy Server - BROWSER BASED INTERFACE, VERY FAST THROUGHPUT, DNS CACHING, CONTENT CACHING, PREFETCHING, BANDWIDTH CONTROL, VIRUS SCAN, Source, Target & Time based GRANULAR FireWall style rules to allow / deny content like music, videos, flash & java applets, messengers, chats, cookies, activex, scripts, etc. REMOTE AUTHENTICATION, REAL-TIME TEXT & IMAGE ANALYSIS for blocking PORNOGRAPHY. LIVE REMOTE SUPPORT.<<less
Download (1014KB)
Added: 2009-04-17 License: Freeware Price: $na
205 downloads
Compact Filter 0.3
Compact Filter is a network packet filter for Linux. more>>
Compact Filter is a network packet filter for Linux. It features an easy-to-use compact filter representation and high performance.
The main features are: easy to use interface, compact filter representation (memory efficient), and very high performance.
A difference between CF and other firewalls, such as Netfilter, is its representation of the ruleset. In CF the user writes a filter which is then compiled and optimized in user-space. The optimized filter is then loaded into the kernel (using netlink). Consequently the in kernel packet filtering code only needs funtionality for setting up a filter and filtering packets, while the more complex code of optimizing the filter remains in user-space.
Because of the continuous increase of the bandwidth and the security threats, firewalls have to evolve towards more efficient filtering schemes. The truth is that the existing scheme does not scale so well with the combined growth of bandwidth and rulesets.
Our aim is to try another approach to perform packet filtering where we minimize the complexity of the filtering process. This result in, both, a reduction of the required CPU power to filter packets and a simpler (and smaller) kernel code. Of course, we are pushing all the smart and complex part out to the user-space, but, developing in user-space is much simpler and safer.
Enhancements:
- changed -d option to delete all filters
- added -D option to delete a specific filter
- changed default policy to permit rather than deny
- added -l option on flex to support --yylineno on older versions of flex
- new and improved install guide
<<lessThe main features are: easy to use interface, compact filter representation (memory efficient), and very high performance.
A difference between CF and other firewalls, such as Netfilter, is its representation of the ruleset. In CF the user writes a filter which is then compiled and optimized in user-space. The optimized filter is then loaded into the kernel (using netlink). Consequently the in kernel packet filtering code only needs funtionality for setting up a filter and filtering packets, while the more complex code of optimizing the filter remains in user-space.
Because of the continuous increase of the bandwidth and the security threats, firewalls have to evolve towards more efficient filtering schemes. The truth is that the existing scheme does not scale so well with the combined growth of bandwidth and rulesets.
Our aim is to try another approach to perform packet filtering where we minimize the complexity of the filtering process. This result in, both, a reduction of the required CPU power to filter packets and a simpler (and smaller) kernel code. Of course, we are pushing all the smart and complex part out to the user-space, but, developing in user-space is much simpler and safer.
Enhancements:
- changed -d option to delete all filters
- added -D option to delete a specific filter
- changed default policy to permit rather than deny
- added -l option on flex to support --yylineno on older versions of flex
- new and improved install guide
Download (0.092MB)
Added: 2006-06-30 License: GPL (GNU General Public License) Price:
1211 downloads
FIR Filter Plugin 1.0.0
The FIR filter Plugin is an effect plugin for XMMS which enables to filter audio data using long FIR filters. more>>
FIR filter Plugin is an effect plugin for XMMS which enables to filter audio data using long FIR (finite impulse response) filters. Typical applications is loudspeaker or room equalization which typically requires filters with more than 300 taps (filter weights).
The FIR filter plugin uses the fftw3 library to perform the filtering using the overlap-and-add method. If fftw3 is not available the plugin will perform the filtering (convolution) in the time-domain which is much less efficient for long filters.
<<lessThe FIR filter plugin uses the fftw3 library to perform the filtering using the overlap-and-add method. If fftw3 is not available the plugin will perform the filtering (convolution) in the time-domain which is much less efficient for long filters.
Download (0.20MB)
Added: 2006-04-05 License: GPL (GNU General Public License) Price:
1299 downloads
Yoxel Systems 1.07b
Yoxel Systems is a software product management and customer feedback management solution. more>>
Yoxel Systems is a software product management and customer feedback management solution. Yoxel Systems is a connected system to track product requirements, manage product life cycles, provide online customer support, and accumulate support knowledge.
Yoxel Systems is more than yet another bug tracker, helpdesk or project organizer. It bridges request tracking and project management by providing a flow manager that walks your team from request prioritization and project planning through project implementation to project completion.
Unlike web based portals from SalesForce.Com or SugarCRM Yoxel Systems is tailored specifically for software development companies.
WHY YOXEL SW?
A role based, easy to use and very flexible request tracking system with customizable workflow, powerful filtering and advanced reporting capabilities.
Product management capabilities and agile methods of development on top of your existing Bugzilla/Mantis/GNATS/...
Automated process for product requirements management and product development planning/tracking.
Efficient collaboration between R&D, marketing and customer support teams to increase relevancy and value of your product releases.
Improved customer support that gives you fast and more accurate customer feedback on product requests and priorities.
WHY YOXEL IT?
The work of IT departments is not just about supporting users and resolving various network issues, it is also about implementing complex projects concerning. infrastructure and efficiency of your systems and business:
YOXEL IT is the solution for your IT department:
Ticket Tracking System is flexible and powerful, packed with features you expect from professional IT helpdesks.
Yoxel IT Project Management System extends TTS allowing your IT specialists to collaborate, plan and track complex IT projects.
<<lessYoxel Systems is more than yet another bug tracker, helpdesk or project organizer. It bridges request tracking and project management by providing a flow manager that walks your team from request prioritization and project planning through project implementation to project completion.
Unlike web based portals from SalesForce.Com or SugarCRM Yoxel Systems is tailored specifically for software development companies.
WHY YOXEL SW?
A role based, easy to use and very flexible request tracking system with customizable workflow, powerful filtering and advanced reporting capabilities.
Product management capabilities and agile methods of development on top of your existing Bugzilla/Mantis/GNATS/...
Automated process for product requirements management and product development planning/tracking.
Efficient collaboration between R&D, marketing and customer support teams to increase relevancy and value of your product releases.
Improved customer support that gives you fast and more accurate customer feedback on product requests and priorities.
WHY YOXEL IT?
The work of IT departments is not just about supporting users and resolving various network issues, it is also about implementing complex projects concerning. infrastructure and efficiency of your systems and business:
YOXEL IT is the solution for your IT department:
Ticket Tracking System is flexible and powerful, packed with features you expect from professional IT helpdesks.
Yoxel IT Project Management System extends TTS allowing your IT specialists to collaborate, plan and track complex IT projects.
Download (0.62MB)
Added: 2006-12-26 License: GPL (GNU General Public License) Price:
1032 downloads
Money-Making-Systems 1.0
The Ultimate Safe Money Guide -Free Online Money Guide Make Your Online Money The Safe Way And Generate a Daily Income Stream. The best thing I came ... more>> <<less
Download (2117KB)
Added: 2009-04-13 License: Freeware Price: Free
193 downloads
Imager::Filters 0.54
Imager::Filters is an entire image filtering operations. more>>
Imager::Filters is an entire image filtering operations.
SYNOPSIS
use Imager;
$img = ...;
$img->filter(type=>autolevels);
$img->filter(type=>autolevels, lsat=>0.2);
$img->filter(type=>turbnoise)
# and lots of others
load_plugin("dynfilt/dyntest.so")
or die "unable to load pluginn";
$img->filter(type=>lin_stretch, a=>35, b=>200);
unload_plugin("dynfilt/dyntest.so")
or die "unable to load pluginn";
$out = $img->difference(other=>$other_img);
Filters are operations that have similar calling interface.
filter
Parameters:
type - the type of filter, see "Types of Filters".
many other possible parameters, see "Types of Filters" below.
<<lessSYNOPSIS
use Imager;
$img = ...;
$img->filter(type=>autolevels);
$img->filter(type=>autolevels, lsat=>0.2);
$img->filter(type=>turbnoise)
# and lots of others
load_plugin("dynfilt/dyntest.so")
or die "unable to load pluginn";
$img->filter(type=>lin_stretch, a=>35, b=>200);
unload_plugin("dynfilt/dyntest.so")
or die "unable to load pluginn";
$out = $img->difference(other=>$other_img);
Filters are operations that have similar calling interface.
filter
Parameters:
type - the type of filter, see "Types of Filters".
many other possible parameters, see "Types of Filters" below.
Download (0.83MB)
Added: 2006-10-17 License: Perl Artistic License Price:
1102 downloads
Water Kills 1.73
Bemused is a system which allows you to control your music collection from your phone, using Bluetooth. more>>
Bemused is a system which allows you to control your music collection from your phone, using Bluetooth. You will need to have a Series 60 or UIQ phone (e.g. Nokia 7650/3650, or Sony Ericsson P800/P900), and a PC with a Bluetooth adapter.
Main features:
- Browse your music collection on your phone
- Play files in any format supported by Winamp - including MP3s, CDs, MIDIs, etc.
- Control Winamp versions 2, 3 and 5, Windows Media Player and PowerPoint Viewer
- Pause, stop, rewind, fast-forward etc.
- Add songs to the playlist and use shuffle and repeat
- Browse and select songs in your playlist
- Download songs to your phone (supported formats: WAV and MIDI; plus MP3 for UIQ)
- Customise the look of the system with skins
Enhancements:
- Series 60: Added new version of German localisation by Ozan Sambur
- Integrated Joachim von Carons fix for a potential PowerPoint crash
- Added ability to get current volume on startup (Winamp 2 or 5 only)
- Fixed bug where song title would be wrong after a playlist repeating
- Fixed bug with getting current song time with Winamp 5
- Fixed crash when pressing Play when using PowerPoint with no presentation loaded
- Improved handling of comms errors in the Bemused server
<<lessMain features:
- Browse your music collection on your phone
- Play files in any format supported by Winamp - including MP3s, CDs, MIDIs, etc.
- Control Winamp versions 2, 3 and 5, Windows Media Player and PowerPoint Viewer
- Pause, stop, rewind, fast-forward etc.
- Add songs to the playlist and use shuffle and repeat
- Browse and select songs in your playlist
- Download songs to your phone (supported formats: WAV and MIDI; plus MP3 for UIQ)
- Customise the look of the system with skins
Enhancements:
- Series 60: Added new version of German localisation by Ozan Sambur
- Integrated Joachim von Carons fix for a potential PowerPoint crash
- Added ability to get current volume on startup (Winamp 2 or 5 only)
- Fixed bug where song title would be wrong after a playlist repeating
- Fixed bug with getting current song time with Winamp 5
- Fixed crash when pressing Play when using PowerPoint with no presentation loaded
- Improved handling of comms errors in the Bemused server
Download (0.38MB)
Added: 2006-07-25 License: GPL (GNU General Public License) Price:
1188 downloads
Safesquid Content Filtering Proxy 4.2.2.RC7
Antivirus and content filtering proxy server more>> Safesquid is an antivirus and content filtering proxy server. It has many advanced features like URL blacklists, bandwidth management, regular expression substitution on Website content and requested URLs, ICP and CARP support to interoperate with other proxy servers, configuration synchronization to ease management of proxy servers in a cluster, ICAP support to use third-party content adaptation software, image and link prefetching, HTTP and FTP content caching, NTLM and Basic authentication, and an intutive Web interface to configure the proxy server.<<less
Download (724KB)
Added: 2009-04-19 License: Freeware Price: Free
236 downloads
Yet Another Filter Proxy 0.1.1
Yet Another Filter Proxy project is a preforking, banner filtering, content scanning Perl proxy. more>>
Yet Another Filter Proxy project is a preforking, banner filtering, content scanning Perl proxy.
Yet Another Filter Proxy is a proxy to filter out advertising banners and malicious script code from web sites. It is written in Perl and based on an example by Randal L. Schwartz.
For performance reasons it uses preforking to spawn several processes of itself (like Apache does).
Unlike other available proxies (such as Junkbuster), it does blocking by Perl regular expressions on the site content, which allows you to block JavaScript and popups, in addition to normal ads.
Run perldoc yafp.pl for full readme!
<<lessYet Another Filter Proxy is a proxy to filter out advertising banners and malicious script code from web sites. It is written in Perl and based on an example by Randal L. Schwartz.
For performance reasons it uses preforking to spawn several processes of itself (like Apache does).
Unlike other available proxies (such as Junkbuster), it does blocking by Perl regular expressions on the site content, which allows you to block JavaScript and popups, in addition to normal ads.
Run perldoc yafp.pl for full readme!
Download (0.027MB)
Added: 2007-03-02 License: GPL (GNU General Public License) Price:
973 downloads
slackware spam filter 0.1.1
slackware spam filter allows you to install spam filtering capabilities onto a slackware 9.1 box. more>>
slackware spam filter allows you to install spam filtering capabilities onto a slackware 9.1 box.
this is a very simple way to install spam filtering capabilities onto a slackware 9.1 box. its pretty simple: install.sh will install/upgrade a few packages in the packages/ directory. then itll patch the system and the installed packages to work together and filter that evil spam.
finally there are some scripts in the scripts/ directory which you can use to maintain your spam filter and stuff. when the system is patched there will also be a few new tools for you to use;
sa-learn-md-wrapper is used by the spam filter as an easy way to learn spam from inside a maildrop filter, and sa-rebuild is an easy tool to rebuild the bayesian filtering index for a couple of users or all of them at once.
run install.sh to install the packages and revised configuration for each
package.
run enable_mail_for_user.sh with users to add and the script will add users and enable them for use with the mail system.
run create_fetchmail_config.sh to create (or add onto) a fetchmail config file in a users home directory. then run fetchmail for that user if you intend on using fetchmail
<<lessthis is a very simple way to install spam filtering capabilities onto a slackware 9.1 box. its pretty simple: install.sh will install/upgrade a few packages in the packages/ directory. then itll patch the system and the installed packages to work together and filter that evil spam.
finally there are some scripts in the scripts/ directory which you can use to maintain your spam filter and stuff. when the system is patched there will also be a few new tools for you to use;
sa-learn-md-wrapper is used by the spam filter as an easy way to learn spam from inside a maildrop filter, and sa-rebuild is an easy tool to rebuild the bayesian filtering index for a couple of users or all of them at once.
run install.sh to install the packages and revised configuration for each
package.
run enable_mail_for_user.sh with users to add and the script will add users and enable them for use with the mail system.
run create_fetchmail_config.sh to create (or add onto) a fetchmail config file in a users home directory. then run fetchmail for that user if you intend on using fetchmail
Download (1.5MB)
Added: 2007-03-13 License: GPL (GNU General Public License) Price:
959 downloads
filtergen 0.11
filtergen takes a high-level langauge and compiles it into packet filtering rules for a variety of packet filters. more>>
filtergen takes a high-level langauge and compiles it into packet filtering rules for a variety of packet filters. Iptables, ipchains, and ipfilter backends are available.
This tool is for generating packet filtering rules from a fairly high-level description language. It doesnt support all of the whizz-bang features of the latest and greatest packet filters, but supports a decent subset which is sufficient for me.
It currently supports just Linux iptables and ipchains. Cisco IOS has been begun, but is incomplete. Darren Reeds ipfilter may be supported at some stage. It doesnt generate optimal rulesets, and has a few limitations which need to be removed, but is still a useful tool.
Not many large softare projects are written entirely in assembly language these days. Its not difficult to be, and the results can often be more efficient, but it does take longer to implement and bugfix, and is not portable to other systems. It is also harder for
others to understand, update and audit.
Similarly, it seems odd that people continue to write packet filters in the equivalent of assembler, or in inflexible macro languages.
Hence this package -- my intent is that "filter" will be to iptables and shell what a C compiler (but not a 4GL) is to assembly.
Enhancements:
- fixed non-working example in filter_syntax man page fix 64-bit warning in filter.c netmask calculation add "-F [policy]" flush option better feedback on parse errors
<<lessThis tool is for generating packet filtering rules from a fairly high-level description language. It doesnt support all of the whizz-bang features of the latest and greatest packet filters, but supports a decent subset which is sufficient for me.
It currently supports just Linux iptables and ipchains. Cisco IOS has been begun, but is incomplete. Darren Reeds ipfilter may be supported at some stage. It doesnt generate optimal rulesets, and has a few limitations which need to be removed, but is still a useful tool.
Not many large softare projects are written entirely in assembly language these days. Its not difficult to be, and the results can often be more efficient, but it does take longer to implement and bugfix, and is not portable to other systems. It is also harder for
others to understand, update and audit.
Similarly, it seems odd that people continue to write packet filters in the equivalent of assembler, or in inflexible macro languages.
Hence this package -- my intent is that "filter" will be to iptables and shell what a C compiler (but not a 4GL) is to assembly.
Enhancements:
- fixed non-working example in filter_syntax man page fix 64-bit warning in filter.c netmask calculation add "-F [policy]" flush option better feedback on parse errors
Download (0.026MB)
Added: 2006-07-10 License: GPL (GNU General Public License) Price:
1201 downloads
Deep-Water Linux 0.4.0 Beta01
Deep-Water Linux is a half minimalist software distribution using the linux kernel. more>>
Deep-Water Linux is a half minimalist software distribution using the linux kernel released under the terms of the gnu gpl license v2.
Originaly i designed it for myself to make my work a bit easyer - it was a few years ago when there were not so many live distributions that fit my needs - i needed something more than "minimal" but not something that would need more than 2-3 minutes to load requireing hardware, that i couldnt afford.
So i designed a small system for myself that i could use whenever i broke my "harddisk" distro so much, that it was impossible to repair the system from inside of it. I started using the system as a sort of a rescue system and i installed it on my computer as a sort of a neighbour to other systems that i have used.
Then i thought other people might find it interesting, if not as a whole, than atleast a part of it, or maybe they might like to use it for some "rescue job". I was messing arround with xlib and tcl/tk, so i added some programs to ease a users life - like a panel, icons, file-manager. You see, i thought it is stupid to just copy someones work and then re-distribute it in my name - i hate the kind of distros where the "developers" just change the background of some well known distro and then give it a new name.
In my distro you wont find so many tools, it evean might not work good, it evean can make you angry "make you laugh, or cry", but atleast i can say, that many things in this system is my work - i programmed deep-panel/ deep-view/ deep-icons/ made a new hackedbox"a hack of blackbox"/designed the startup and many other things.
There are 2 version-types of the distro - the first copying the whole system in the memmory and the second copying only a part of itself - the first is for people with older hardware with little memmory and the second for boxes with memmory atleast 128MB. I know that there are many systems out there that are better and im not saying that its good to use this distro on an everyday basis, but if you find some inspiration in it, or if you use it as a rescue system, or want to use deep-view to browse/edit some files or to display image galleries and your "real" system is broke, if you find any use of it than im happy enough.
<<lessOriginaly i designed it for myself to make my work a bit easyer - it was a few years ago when there were not so many live distributions that fit my needs - i needed something more than "minimal" but not something that would need more than 2-3 minutes to load requireing hardware, that i couldnt afford.
So i designed a small system for myself that i could use whenever i broke my "harddisk" distro so much, that it was impossible to repair the system from inside of it. I started using the system as a sort of a rescue system and i installed it on my computer as a sort of a neighbour to other systems that i have used.
Then i thought other people might find it interesting, if not as a whole, than atleast a part of it, or maybe they might like to use it for some "rescue job". I was messing arround with xlib and tcl/tk, so i added some programs to ease a users life - like a panel, icons, file-manager. You see, i thought it is stupid to just copy someones work and then re-distribute it in my name - i hate the kind of distros where the "developers" just change the background of some well known distro and then give it a new name.
In my distro you wont find so many tools, it evean might not work good, it evean can make you angry "make you laugh, or cry", but atleast i can say, that many things in this system is my work - i programmed deep-panel/ deep-view/ deep-icons/ made a new hackedbox"a hack of blackbox"/designed the startup and many other things.
There are 2 version-types of the distro - the first copying the whole system in the memmory and the second copying only a part of itself - the first is for people with older hardware with little memmory and the second for boxes with memmory atleast 128MB. I know that there are many systems out there that are better and im not saying that its good to use this distro on an everyday basis, but if you find some inspiration in it, or if you use it as a rescue system, or want to use deep-view to browse/edit some files or to display image galleries and your "real" system is broke, if you find any use of it than im happy enough.
Download (40MB)
Added: 2005-08-12 License: GPL (GNU General Public License) Price:
1537 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above water filtering systems search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed
