Advanced HTTP Header Rewriting Tool

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

Pure-Go Conntrack implementation; for humans.

A Linux kernel IPC firewall and logger for Android and Binder

百度网盘会员青春版 - 模拟百度云盘会员，支持隐藏云一朵、使用视频倍速、生成/查看/下载 AI字幕、修改头像、用户名、等级、SVIP 10 ID 等功能

Simple script against most network threats.

Open Source Deep Packet Inspection Software Toolkit

Geographical host protection for Linux/FreeBSD

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

Allow/deny traffic in nftables using country specific IP blocks

c-binding free API for golang to communicate with the queue subsystem of netfilter

Rust bindings for iptables

Firegex, a firewall for Attack-Defense CTFs

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control

Pure-Go Netfilter Netlink family implementation.

c-binding free API for golang to communicate with the log subsystem of netfilter