Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~100% confidence)

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

A Linux kernel IPC firewall and logger for Android and Binder

Open Source Deep Packet Inspection Software Toolkit

Pure-Go Conntrack implementation; for humans.

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

Simple script against most network threats.

Geographical host protection for Linux/FreeBSD

Allow/deny traffic in nftables using country specific IP blocks

Rust bindings for iptables

c-binding free API for golang to communicate with the queue subsystem of netfilter

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

Transparent TLS and HTTP proxy serve and operate on all 65535 ports, with domain regex whitelist and rest api control

Pure-Go Netfilter Netlink family implementation.

c-binding free API for golang to communicate with the log subsystem of netfilter

Netfilter Conntrack Stats Exporter

TeaVPN2 - An open source VPN Software (currently supported platform is only Linux).

Opensvp is a security tool implementing "attacks" to be able to test the resistance of firewall to protocol level attack.