Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Open Source Deep Packet Inspection Software Toolkit

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

A Linux kernel IPC firewall and logger for Android and Binder

Pure-Go Conntrack implementation; for humans.

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

Geographical host protection for Linux/FreeBSD

A very simple script that uses special iptables rules and sysctl tweaks that protects your server(s) against many different network attacks.

Allow/deny traffic in nftables using country specific IP blocks

Rust bindings for iptables

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

Pure-Go Netfilter Netlink family implementation.

c-binding free API for golang to communicate with the queue subsystem of netfilter

Abuseipdb IP Aggregator

c-binding free API for golang to communicate with the log subsystem of netfilter

Netfilter Conntrack Stats Exporter

TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).

Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control

Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.