rethink-app - DNS over HTTPS / DNS over Tor / DNSCrypt client, firewall, and connection tracker for Android

•    Kotlin

---

An OpenSnitch-inspired firewall and network monitor + a pi-hole-inspired DNS over HTTPS client with blocklists. In other words, RethinkDNS has two primary modes, DNS and Firewall. The DNS mode routes all DNS traffic generated by apps to one of two DNS over HTTPS resolvers (Cloudflare and RethinkDNS). The Firewall mode lets the user deny internet-access to entire applications based on events like screen-on / screen-off, app-foreground / app-background, connected to unmetered-connection / metered-connection / always; or based on play-store defined categories like Social, Games, Utility, Productivity; or additionally, based on user-defined blacklists.

android dns open-source dnscrypt firewall android-application internet-freedom censorship-circumvention android-app android-firewall dns-over-https privacy-enhancing-technologies anti-censorship anti-surveillance censorship-resistance

WhatWaf - Detect and bypass web application firewalls and protection systems

•    Python

---

WhatWaf is an advanced firewall detection tool who's goal is to give you the idea of "There's a WAF?". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass (or two) for said firewall, on the specified target.

firewall detection waf web-application fingerprinting bypass web-application-firewall web-application-firewall-bypassing

shadowd - The Shadow Daemon web application firewall server

•    C++

---

Shadow Daemon is a collection of tools to detect, record and prevent attacks on web applications. Technically speaking, Shadow Daemon is a web application firewall that intercepts requests and filters out malicious parameters. It is a modular system that separates web application, analysis and interface to increase security, flexibility and expandability. This is the main component that handles the analysis and storage of requests.

firewall web-application-firewall waf

ModSecurity - Cross platform Web Application Firewall (WAF)

•    C

---

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

firewall web-application-firewall waf owasp

janusec - Janusec Application Gateway, a Golang based application security solution which provides WAF (Web Application Firewall), CC attack defense, unified web administration portal, private key protection, web routing and scalable load balancing

•    Go

---

Janusec Application Gateway, an application security solution which provides WAF (Web Application Firewall), CC attack defense, unified web administration portal, private key protection, web routing and scalable load balancing. With Janusec, you can build secure and scalable applications. Detailed documentation is available at Janusec Application Gateway Documentation.

waf web-application-firewall application-gateway load-balance gateway application-security security web-application-security reverse-proxy sql-injection xss cc-attack-defense sensitive-data-leakage janusec-application-gateway

iptables-essentials - Iptables Essentials: Common Firewall Rules and Commands.

•    

---

Found on the Internet - All in One List.   🔸 Shorewall - advanced gateway/firewall configuration tool for GNU/Linux.   🔸 Firewalld - provides a dynamically managed firewall.   🔸 UFW - default firewall configuration tool for Ubuntu.   🔸 FireHOL - offer simple and powerful configuration for all Linux firewall and traffic shaping requirements.

iptables iptables-rules iptables-configurations iptables-firewall firewall firewall-rules firewall-configuration

Firewall Builder

•    C++

---

Firewall Builder is a GUI firewall management application for iptables, PF, Cisco ASA/PIX/FWSM, Cisco router ACL and more. Firewall configuration data is stored in a central file that can scale to hundreds of firewalls managed from a single UI.

Endian Firewall Community

•    Groovy

---

Endian Firewall Community (EFW) is a "turn-key" linux security distribution that makes your system a full featured security appliance with Unified Threat Management (UTM) functionalities. The software has been designed for the best usability: very easy to install, use and manage and still greatly flexible. The feature suite includes stateful packet inspection firewall, application-level proxies for various protocols (HTTP, FTP, POP3, SMTP) with antivirus support, virus and spam-filtering f

Open-Firewall

•    C

---

Open Firewall is a way to agregate some good technologies to make a complete, robust and fast application level firewall. It will provide an open framework for developpers who wish to implement protocol filters.

IPFire - An open source firewall solution

•    C

---

IPFire is a server distribution with intended to use as a firewall. It focuses on flexibility, and scales from small to middle sized business networks and home networks. Beginning with a small firewall system of a few megabytes, it is possible to run IPFire as a file server or VPN gateway for staff, branches or customers. This modularity means that yor version of IPFire runs with exactly what you require and nothing more.

firewall network protection linux-firewall security router gateway vpn

m0n0wall - Embedded Firewall

•    PHP

---

m0n0wall is a project aimed at creating a complete, embedded firewall software package that, when used together with an embedded PC, provides all the important features of commercial firewall boxes. The entire system configuration is stored in one single XML text file to keep things transparent. It features include NAT/PAT, IPv6 support, SNMP agent, caching DNS forwarder, VPN tunnels and lot more.

firewall network protection linux-firewall security router gateway

Sphirewall - Opensource Firewall

•    C

---

Ssphirewall is a powerfull firewall, built from scratch to give you complete control and visibility over your network. It is built with everything you would expect from a network firewall, with a simple and flexible management interface. Its features include Routing, Nat and Pat, Dhcp support, PPPoE support, - Stateful firewall core, Flexible filtering rules, QOS and Traffic Shaping, Analytics and lot more.

firewall router qos

afwall - AFWall+ (Android Firewall +) - iptables based firewall for Android

•    Java

---

Android Firewall+ (AFWall+) is an advanced iptables editor (GUI) for Android. It provides fine-grained control over which Android apps are allowed to access the network. For more information and community discussions, please visit the XDA thread or our Wiki.

iptables firewall android android-firewall block afwall crowdin

firewall - Firewall package for Laravel applications

•    PHP

---

This a "soft-firewall" package. Its purpose is to help people prevent unauthorized access to routes by IP address. It is able to keep track of IPs, countries and hosts (dynamic ip), and redirect non-authorized users to, for instance, a "Coming Soon" page, while letting whitelisted IPs to have access to the entire site. It is now also able to detect and block attacks (too many requests) from single IPs or whole countries. This package can prevent some headaches and help you block some access to your apps, but cannot replace firewalls and appliances, for attacks at the network level, you'll still need a real firewall.

firewall attack-prevention laravel attack-detection

PyGuard Firewall

•    Python

---

The PyGuard Firewall is a Linux firewall distribution. It is geared towards home, SOHO and small business users. The main difference with existing firewalls is that the PyGuard interface will be very user-friendly and task-based. The firewall can be rem

Ghost Personal Firewall By Cellocity

•    C

---

Ghost Personal Firewall (formerly KerioKlone) aims to be a Windows 95/98/XP/2000 rule based firewall written in C/C++ with similar design and simplicity to but an improvement of Kerio Personal Firewall 2.15, a phased out closed source product.

Firewall Tunnel

•    C

---

Enable servers behind a firewall to export services to the external networks with the assistance from an externel host as proxy (Jumppoint). The firewall tunnel consists of two parts: a frontend as quot;Jumppointquot; and a backend running behind the firewall

bastion-firewall

•    C

---

bastion-firewall is a Netfilter based firewall for Linux. It can generate graphical stats of all the rules traffic in the firewall with Rrdtool and it's integrated with the Snort Inline IPS. It's written in the bash and C programming languages.

NetDefender - Firewall

•    C++

---

NetDefender is a Free Firewall with source code, which can be downloaded along with firewall executables. Netdefender works on windows 2000 and windows XP.

firewall applications mfc networking open-source ozz

OPNsense - Your Next Open Source FireWALL

•    PHP

---

OPNsense is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform. The feature set of OPNsense includes high-end features such as forward caching proxy, traffic shaping, intrusion detection and easy OpenVPN client setup. It also supports Netflow Exporter, Network Flow Monitoring, DNS Server & DNS Forwarder, Stateful inspection firewall and lot more.

firewall router netflow-monitor intrusion-detection