firewall software

VisNetic Firewall is a packet-filtering software firewall built to protect Windows-based Servers, telecommuters / mobile users, and LAN workstations not currently protected by a firewall. VisNetic Firewall is more secure than application-based personal firewalls, yet less expensive than high-end software firewalls.

Organizations running software and/or hardware Internet sharing solutions are as concerned about internal threats as they are about external threats. There is currently not a hardware firewall solution that protects companies against these threats and existing software firewall solutions are priced outside of the small to medium business market.

Linux Firewall is a robust, well-designed firewall for Linux 2.4 based on netfilter/iptables. The Projectfiles.com Linux Firewall is the swiss army knife of Linux firewall software. Based on the netfilter-iptables tools, the firewall is a single shell executable written in bash with configuration options and basic documentation included in the same file. It is designed for use with all types of systems: workstations, routers, and servers, and includes advanced features for expert users and Internet Service Providers.

Here are some installation tips:

1. Download the latest rc.firewall [wget http://projectfiles.com/firewall/rc.firewall]
2. Edit the options at the beginning of the file with your favorite text editor. The script comes pre-configured to deny all incoming connections. This is suitable for a typical workstation installation. Refer to the configuration page for in depth explanation of available options.
3. Make the script executable [chmod +x ./rc.firewall]
4. Become root [su]
5. Run the script [./rc.firewall]
6. After you verify that the firewall runs without errors, you may want it to be run automatically on boot. To accomplish this, move the script to the appropriate startup script directory for your distribution [/etc/rc.d/ for Slackware, /etc/init.d/ for Gentoo] and add the following lines in your startup scripts at some point after your ethernet interfaces are configured [for example /etc/rc.d/rc.local for Slackware, and /etc/conf.d/local.start for Gentoo].

Slackware
if [ -x /etc/rc.d/rc.firewall ]; then
/etc/rc.d/rc.firewall
fi
Gentoo
if [ -x /etc/init.d/rc.firewall ]; then
/etc/init.d/rc.firewall
fi

See forum for alternate installation methods.
7. If you are using this firewall on a machine to which you do not have physical access, but can reboot remotely (for example a collocated server or a Linux router at a computer illiterate friends house), you might want to think about putting in a short delay between the time the machine boots and the initialization of the firewall. This would give you a chance to log in and disable the firewall [chmod -x] if something goes wrong. A good example might be if you have the script configured to allow you to connect from a specific remote IP address and your address changes. If you choose to implement this idea, it can be done with the following code in rc.local:

if [ -x /etc/rc.d/rc.firewall ]; then
sleep 30 && /etc/rc.d/rc.firewall | logger -t rc.firewall &
echo "Firewall init in 30 seconds. Check syslog for results."
fi

This MULTI-PLATFORM Firewall is the easy, multi-purpose security application you have been looking for. It utilizes next-generation IDS technology to deliver enterprise-class Deep Packet Inspection, Application Layer vulnerability protection, and intelligent Intrusion Prevention.

Forget about run-of-the-mill commercial firewalls and expensive hardware devices. InJoy Firewall is what the name implies; a powerful "feel-good" product - easy for the average user, and a MUST-HAVE for advanced users. Install it and become an INSTANT SECURITY PROFESSIONAL with complete authority over your Internet connection and real-time transparent insight into almost any network activity.

InJoy Firewall is the ONLY Firewall in the security market that offers a total end-to-end multi-platform software solution. It solves the overwhelming problems related to managing multi-vendor security devices, now making it easier than ever to build enterprise-wide IPSec VPNs and set up identical cross-platform end-point security.
The intuitive user interface is highly customizable, allowing you to efficiently control and manage Firewall Servers - locally or remotely, and even across OS Platforms. In addition, A HOT NEW TOOLBAR application enables you to casually keep an eye on the "intrusion score", while preserving desktop space for other work.

InJoy Firewall is the ultimate firewall solution for organizations of all sizes. Put an end to the cost, confusion and complexity of managing multiple security devices. Use the power and simplicity of InJoy Firewall Pro to take control of your network security today.

Basic features include: 10+ Pre-configured Security Levels, Internet Gateway support, IPSec VPN tunnels, Bandwidth Management, Web Filtering, E-mail SMTP Server Protection, Remote Management, comprehensive rule-based Packet Filtering, PPPoE, and much more...

Trustix Enterprise Firewall represents a revolution within firewall management software. Trustix Enterprise Firewall is the worlds first WYSIWYG Enterprise Firewall, making it easy-to-use and easy-to-deploy. By utilizing the WYSIWYG GUI, your Enterprise Firewall will be out of the box and implemented in an unbeatable 25 minutes- and without the need for a dedicated systems administrator!

A fully-featured packet-filtering router, Trustix Enterprise Firewall has advanced capabilities including an intuitive graphical user interface (GUI) for visualizing and editing firewall policy.

This unique GUI enables you to manage traffic for all your zones (up to 24) as well as port forwarding, network address translation (NAT) and virtual private network (VPN) configurations.

Packet-filtering enables Enterprise Firewall to act as a router to accelerate data transmission. Meaning no more bottle necks due to time consuming proxies.

IP-address sharing by masquerading or NAT.

The underlying rules generated by the program are then fully optimized before being deployed- thereby optimizing the security and performance of your firewalls architecture, and avoiding errors and duplications.

Trustix Enterprise Firewall uses the IPsec protocol to encrypt data transmitted over the net- extending the security of your network to all arms of your business. Communications between your office and home users are protected using 168-bit 3DES encryption- triple the encryption, triple the security! Enables remote, secure configuration of multiple firewalls from one Windows or Linux desktop.

Trustix Enterprise Firewall Blockades and repel malicious attacks from hackers, Trojans, worms and infected files.

Here are some key features of "Trustix Enterprise Firewall":

· Visualise DMZs - drag and drop security policy deployment
· Integrate branch offices with 3DES encrypted VPN tunnels
· Accelerate internet access times with proxy caching server
· Authenticate remote workers with PKI X.509 certificates
· Ensure high availability with fault tolerant automatic failover

BullDog is a powerful but lightweight firewall for heavy use systems. With many features, this firewall can be used by anyone who wants to protect his/her systems. This system allow dynamic and static rules sets for maximum protection and has several advance features.

This firewall will work for the hobbyist or a military base. Generation 7 is a complete rewrite of its predecesors and is redesigned from scratch and still evolving.

Be prepared to spend some time setting this up. If you are looking for a "quick fix", then you are on the wrong site. BullDog is NOT a quick fix, but rather one step in a complete security policy.

Its is covered by the GPL and is FREE and always will be. I encourage and welcome anyone who wants to port and/or provide ideas/code to better this software.

I would like to see this software developed into a new breed of firewall that provides the best of security with ease of use.

This software was developed on Linux v2.2.16-17 and v2.4 with 64 megs to 1 Gig of RAM and supports iptables via the ip_queue kernel module. Bulldog will NOT run on Windows systems.

8Signs Firewall software has been designed for administrators wanting to protect a Windows Internet server, and power users who want complete information and control over their network security.

Here are some key features of "8Signs Firewall":

Stateful Packet Inspection
· 8Signs Firewall uses stateful packet inspection to help detect malicious traffic and ensure that only correct data is passed. Every packet in a connection is checked to see if it is valid. TCP header flags, sequence numbers and other packet contents are used to monitor the "state" of the connection and any packet that does not conform is blocked. This allows 8Signs Firewall to catch malicious activity such as port scans, certain DoS (denial of service) attacks and fragment attacks.
Port Scan Detection
· Port scanning is one of the most fundamental techniques that a hacker may use to begin an attack. An attacker can potentially discover a wide variety of information by performing a scan, such as services you are running, what versions of those services you are running, and even what operating system the host uses. In many cases, information revealed during a port scan can leave a system highly vulnerable to an attacker.
· 8Signs Firewall detects the seven most common forms of port scans, alerting you with a log entry and optionally automatically banning the IP address of the scanner, ensuring that they are "cut off" before they can discover any useful information about your system.
Ban List
· 8Signs Firewall lets you block IP addresses or ranges of addresses to prevent unwanted connection attempts. This can be particularly effective in stopping repeated requests from a hacker who is trying a large number of hacks, looking for one that works. Entries to the Ban List can be made manually, or automatically using the "Ban IP" action on a Block rule, the Port Scan feature or the by using HTTP Filtering option.
· To help link other programs (email, IDS, etc.) to the firewall for banning IPs, ban list entries can also be added or removed from the command line.
Tarpits
· 8Signs Firewall allow you to trap hackers, slow down the spread of worms and stall spammers by creating tarpits. A tarpit is a trap for troublesome outsiders. Your system accepts TCP connections but never replies and ignores disconnect requests. This can leave ports scanners and hackers stuck for hours, even days.
Remote Administration
· Using the remote administration component of the Server version of 8Signs Firewall, you can now remotely administer any 8Signs Firewall using an encrypted communications link. Remote systems are controlled through the firewall interface, just as you access the firewall on your local machine. You can monitor activity and log messages, and rules can be added, edited, deleted, imported or exported. You can also reboot or shut down the remote system using the remote admin controls.
· In addition to remotely administering other Server or Workstation firewalls, you can use the stand-alone Remote Administration Tool to remotely connect to your own Server firewall.
HTTP Filtering (Server version only)
· Using 8Signs Firewall s HTTP Filtering (available in the Server version only), you can prevent intrusion attempts targeted at your web server by screening requests and automatically banning the offender s IP address, preventing further access. While HTTP filtering will work to protect all web servers, it has been tailored for IIS servers and the hack attempts that have been targeted at them.
SYN Flood Detection and Protection
· A SYN Flood is a common type of denial of service (DoS) attack used against servers. When launching a SYN Flood, an attacker bombards you with so many connection requests that your computer is unable to accept legitimate connections, effectively shutting down your web, email, FTP or VPN server. 8Signs Firewall employs SYN cookies to protect you from SYN Flood attacks. SYN cookies are a method of managing TCP connection attempts without using up any resources during the process. Since the goal of a SYN flood is to force a server to use up its resources so legitimate users cannot connect, using SYN cookies makes a server much more resistant to this form of attack. SYN cookies are in use in Linux and Free BSD to protect against SYN floods.
Port, IP and MAC Address Groups
· Simplify your ruleset and tighten security by using the port, IP and MAC address groups available in 8Signs Firewall. Using groups, you can create one rule that can apply to multiple ports, IP addresses or MAC addresses.
Fine-Grained Access Control
· 8Signs Firewall gives the administrator unparalleled control over the traffic passing through the firewall. All traffic is blocked by the firewall, unless you have specifically configured a rule to allow it. Rules are configured per-device, and you have full control over the local and remote IP address, local and remote port(s), protocol, and direction of the traffic that you will allow through the firewall.
Separate Rulesets for Each Network Adapter
· 8Signs Firewall allows you to maintain a separate set of rules to be applied to each network adapter in your system. Thus you can configure a set of rules to be applied to traffic passing over your external/Internet interface, while having a separate set of rules that apply to traffic through your internal/LAN interface.
MAC Address Filtering
· 8Signs Firewall now has the ability to filter traffic based on MAC addresses. Because a MAC address is specific to one individual network interface, this feature is particularly useful if you want to allow or block traffic from a particular computer whose IP address may change. MAC address rules can be used to "trust" a MAC address (or group of MAC addresses). This allows you to create firewall rules that will only apply to computers whose MAC addresses are trusted.
IP Tracer Tool
· 8Signs Firewall s IP Tracer is a tool that will perform "whois" and "reverse DNS" lookups on IP addresses that appear in your log file. IP Tracer can give you information on the source of suspected intrusion attempts, as well as help you troubleshoot any problems that you encounter with applications that are being blocked by the firewall.
Easy Importing/Exporting of Rules
· Deploying 8Signs Firewall across a number of workstations or servers is simplified by your ability to Export and Import rules. These rule subsets can even be shared amongst 8Signs Firewalls running on different operating systems.
Full-Time Security
· In addition to securing your computer while running, 8Signs Firewall is also protecting your system during the boot process. 8Signs Firewall can also be configured to block all traffic to and from your computer when the firewall is not even running!
Comprehensive Logging
· 8Signs Firewall has full logging capabilities. You have complete control over what to log, how large the log file can become, where to store the logs, and how often to begin a new log file.
Automatic Emailing of Log File
· Keeping an eye on your own or a customers firewall is made easier with 8Signs Firewalls ability to schedule automatic emailing of the log file to any email address that you specify.
Remote Notification of Rule Hits
· Rules can be configured to trigger an email to be sent to any email address that you specify if the rule is hit. For example, if you want to be notified immediately if a hacker is scanning your firewall for the Back Orifice trojan, simply configure a rule that will specifically block this type of traffic and send an email to you if the rule is hit.
Time-Sensitive Rules
· Rules can be configured to only be active on certain days, or at certain times of the day. For example, you may want to allow web browsing only on weekdays between 9:00 am and 5:00 pm, or allow for remote access to your server only on Tuesday evenings for maintenance............this is easily accomplished using time-sensitive rules.
Password Security
· 8Signs Firewall can require that a user must log into the firewall before having access to any of the firewall administration or logging screens. Using password security prevents an unauthorized user from tampering with, or shutting down, the firewall.
Control of All Protocols
· While many firewalls filter only the IP protocols, ignoring others such as NETBEUI and IPX, 8Signs Firewall intercepts them all and can be configured to allow or block this type of traffic. 8Signs Firewall can also control the less commonly used IP protocols such as GRE, which is required for VPN traffic.
Connections Display
· The Connections Display is a real-time display showing all active connections going through the firewall. For example, with 8Signs Firewall installed on a web server a quick glance at the Connections Display would show the administrator how many visitors are currently at their web site.


Limitations:

· 30 days trial

Antispy Firewall is a simple-to-use anti-spyware and privacy enhancement tool. simply click and start. Antispy Firewall finds spy programs such as Spector designed specifically to record your screen, email, passwords and much more! Antispy Firewall will tell you when it was installed, and disable it! Unlike the typical antivirus approach, it does not rely on pattern-matching, so it may work on new or unknown types of monitoring programs, many cool than any other spy software scanner!

Turtle Firewall is a software which allows you to realize a Linux firewall in a simply and fast way.

Turtle Firewall project is based on Kernel 2.4.x and Iptables. Its way of working is easy to understand: you can define the different firewall elements (zones, hosts, networks) and then set the services you want to enable among the different elements or groups of elements.

You can do this simply editing a XML file or using the comfortable web interface Webmin.

Turtle Firewall is an Open Source project written using the perl language and realeased under GPL version 2.0 by Andrea Frigido (Frisoft).

Here are some key features of "Turtle Firewall":

· ZONES, NETWORKS, HOSTS and GROUPS definitions.
· Filter rules definitions based on services.
· New services definitions.
· NAT
· Masquerading

InJoy Firewall is a flexible firewall security solution for businesses of any size. It offers preconfigured policy templates, including full customization options, IPSec VPN integration, gateway capabilities, intuitive management, access control, many documented deployment examples, and comprehensive documentation.

Without question, the Linux Operating System provides a proven and cost-effective platform, as well as a wealth of high-quality open source software. For business use, however, it often proves difficult to find supported linux firewall solutions that provide the required level of confidence, reliability and trust. With the InJoy Firewall , businesses can benefit from Linux without having to give up the safety of a responsible vendor and a traditional business relationship.

Security as never before the InJoy Firewall for Linux provides customers with next generation intrusion and anomaly detection. These technologies provides network administrators with the ultimate tools to keep track of network activity and eliminate Internet threats of any type.

As a busy and responsible network administrator, you will find great relief in the InJoy Firewall . As the only Linux firewall, it is designed from the ground up to be self-contained, thus ensuring optimal performance and minimum impact from third-party problems. This means you dont have to worry about dependencies with Linux connectivity software, software libraries or kernel compilation.


Manage your remote Linux-based Firewall Server from your Windows-based desktop (or any other supported Operating Systems), using the intuitive InJoy firewall GUI. Linux users that prefer plain-text configuration can opt for that with the InJoy firewall as well.

The InJoy firewall works the same under all the supported operating systems, meaning you can deploy a complete and unified protection strategy throughout the business and effortlessly set up fully capable VPNs without having to worry about interoperability issues.

The InJoy firewall installs in minutes and can be prepared for distributed, company-wide deployment, using the same simple installation scripts everywhere.

Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations.

Firewall Builder currently supports iptables, ipfilter, OpenBSD PF and Cisco PIX. Technical summary of features supported by the policy compilers for all platforms can be found in the section "Modules" (see menu on the left).

Being truly vendor-neutral, Firewall Builder can generate configuration file for any supported target firewall platform from the same policy created in its GUI. This provides for both consistent policy management solution for heterogeneous environments and possible migration path.

With the additional purchase of Firewall Builder for PIX, Firewall Builder functions as a sophisticated policy management software for Cisco PIX firewall with access to all functions of PIX including newest features added in v6.3.

Firewall Builder allows for management of multiple firewalls using the same network object database.

Change made to an object is immediately reflected in the policy of all firewalls using this object. Administrator only needs to recompile and install policies on actual firewall machines.

In Firewall Builder, administrator works with an abstraction of firewall policy and NAT rules; software effectively "hides" specifics of particular target firewall platform and helps administrator focus on implementation of security policy.

Backend software components, or policy compilers, can deduct many parameters of policy rules using information available through network and service objects and therefore generate fairly complex code for the target firewall, thus relieving administrator from having to remember all its details and limitations. Policy compilers can also run sanity checks on firewall rules and make sure typical errors are caught before generated policy is deployed.

With the additional purchase of Firewall Builder for PIX, Firewall Builder functions as a sophisticated policy management software for Cisco PIX firewall with access to all functions of PIX including newest features added in v6.3.

Limitations:

· There are no restrictions or limitations in the code running in evaluation mode. When you purchase a license, we assume that you have already downloaded the product and have it installed. The license file that you receive via email after you make the purchase contains an activation code that allows you to use the software beyond the initial 30-day evaluation period.

Kool Firewall is firewall security software designed to monitor the traffic into and out of your system. Within the scanning window, you may see traffic through various ports such as 110 (pop3), 80 (web) and a few others. Kool Firewall has built-in algorithms to detect malacious or unauthorized access to your computer. When such hazard happens, it reports the alert in a Possible Attacks window and also allows you to save it to a log file.

Personal Firewall MS description
A software application that protects valuable information in your computer. Personal Firewall application was designed to be a security software for your system.

You secure your home from thieves - but what about those thieves that enter unnoticed through your Internet connection? Personal firewall software will protect valuable information in your computer.