Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~100% confidence)

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

A Linux kernel IPC firewall and logger for Android and Binder

Open Source Deep Packet Inspection Software Toolkit

Pure-Go Conntrack implementation; for humans.

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

Simple script against most network threats.

Geographical host protection for Linux/FreeBSD

Allow/deny traffic in nftables using country specific IP blocks

Rust bindings for iptables

c-binding free API for golang to communicate with the queue subsystem of netfilter

Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

Pure-Go Netfilter Netlink family implementation.

c-binding free API for golang to communicate with the log subsystem of netfilter

Netfilter Conntrack Stats Exporter

TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).

Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.