AS_IPFW 4.1
Details
| Size: | 0K |
| Last Update: | 2008-04-19 23:33:33 |
| OS Support: | Linux |
| License/Program Type: | LGPL (GNU Lesser General Public License) |
| Publisher: | Jan Engelhardt |
| Price: | $0.00 |
Description:
AS_IPFW 4.1 is networking software developed by Jan Engelhardt.
AS_IPFW is designed to be a firewall API, but also has some rulesets that can be used as-is in many situations.
Version 4.0 adds support for kernel-level iptables-based STEALTH SCAN (tcp half open) detection -- a first according to my research with a nameful search engine. It also dramatically slows down TCP FNX (FIN/NULL/XMAS) scans -- by more than 50000%, and UDP by more than 65000%! On top, it provides back false information to do the best in hindering and confusing hostile actions.
Unlike many other firewalls, AS_IPFW does not try to have a solution for every network topology. AS_IPFW project is more like an API. If you cannot find a ruleset that fits all your needs (and that's what a good firewall should require), you are encouraged to write a ruleset.
Because every so-called "style" (firewall ruleset) is written, maintained, and optimized "by hand", a high performance degree is achieved by keeping the number of necessary comparisons to verdict a packet low.
A handful of iptables extensions is required (in-kernel, as well as in userspace) -- details are in the GOT_EVERYTHING.txt file within the package.
What's New in This Release:
Support for network segment-based filtering and some warning options were added, and ipt_state is replaced by ipt_conntrack.
AS_IPFW 4.1 supports different languages (including english). It works with Linux.
Downloading AS_IPFW 4.1 will take if you use fast ADSL connection.
0 comments
Add to
AS_IPFW 4.1 Version History
Related Software
|
|
From category: Operating-Systems-Other |
| Early Macintosh Image LoadEr 0.10 is operating systems other software developed by Laurent Vivier. Early Macintosh Image LoadEr allows to boot linux-m68k from a floppy on a macintosh such as MacII... |
|
|
From category: Filesystems |
| FUR filesystem 0.4.1 is filesystems software developed by Riccardo Di Meo. FUR is a application that let the user mount a Windows CE based device on your Linux file system: it uses the brilliant FU... |
|
|
From category: Operating-Systems-Kernels |
| FR1 2.15b is operating systems kernels software developed by Peter T. Breuer. FR1 is a Linux kernel driver that adapts the kernel\'s own software RAID1 driver. It\'s intelligent in that it d... |
|
|
From category: Installer-Setup |
| apt-iselect 20041204 is installer/setup software developed by Dobrica Pavlinusic. This is small wrapper for apt-cache search and apt-get install which uses iselect to search and install packages. I... |
|
|
From category: Operating-Systems-Linux-Distri |
| ASork Live Music Studio 0.01 Beta1 is operating systems linux distri software developed by Johan Mattsson. ASork Live Music Studio is a live cd with Debian GNU/Linux made of Morphix. ASork Live Mus... |
|
|
From category: Shells |
| Hotwire is intended to replace the interactive command execution portion of a typical Unix shell.... |
|
|
From category: Clustering-and-Distributed-Networks |
| Celluster is an easy adaptable producer/consumer software for distributed computing on a cluster of Cell B.E. processors.... |
|
|
From category: Networking |
| Basic Analysis and Security Engine 1.2 is networking software developed by Kevin Johnson. BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intru... |
|
|
From category: Operating-Systems |
| GoboLinux is pretty different from the other Linux distributions you may be used to.... |
|
|
From category: Console-Fonts |
| bitedit 0.9.4 is console fonts software developed by sittingduck. bitedit is a simple ncurses program for editing a file. It allows you to directly edit of the individual bits of a binary file in a... |
|
|
From category: Monitoring |
| Cpqarrayd 2.2 is monitoring software developed by Strocamp Net. Cpqarrayd is a daemon to monitor HP (compaq) arraycontrollers. Cpqarrayd project reports any status changes, like failing disks, to t... |
|
|
From category: System-Administration |
| cxSSHAdmin 0.7 is system administration software developed by Alf Solli. cxSSHAdmin is a menu (ncurses with dialog) based utility to perform various administration tasks via SSH. Here are so... |
|
|
From category: Networking |
| Aguia 0.2 is networking software developed by Victor Bogado da Silva Lins. Aguia is an Apache module to create lua handlers. It can cache precompiled scripts on the server to improve server speed.... |
|
|
From category: Networking |
| MyConnection Server is broadband testing software which measures connections for bandwidth speeds.... |
|
|
From category: Networking |
| Beepage 1.2.1 is networking software developed by Patrick McNeal. Beepage is a Unix-based text paging package. Text pages sent by the client over TCP/IP are received by the provided server, which q... |
Leave a comment