netfilter 开源项目推荐（227 个）

SunBK201 /UA3F

Advanced HTTP(S) Rewriting Proxy

borestad /blocklist-abuseipdb

Aggregated AbuseIPDB blocklists with worst IPv4 & IPv6 offenders (~99% confidence)

hmjz100 /BaiduNetDiskYouthMember

百度网盘会员青春版 - 模拟百度云盘会员，支持隐藏云一朵、使用视频倍速、生成/查看/下载 AI字幕、修改头像、用户名、等级、SVIP 10 ID 等功能

x-way /iptables-tracer

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

ti-mo /conntrack

Pure-Go Conntrack implementation; for humans.

AliDbg /IPBAN

⚔️🧱🔥🛑IP BAN Block Allow GEOIP country traffic limit server input/output to IP countries with iptables+xt_geoip, auto db-ip update, firewall fail2ban gfw ufw cidr blacklist netfilter rules persistent restrict netaddr xtables linux debian ubuntu apache nginx web server anti hack ddos firewalld ipblocks ipdeny ip ranges MaxMind ipset

ntop /ipt_geofence

Linux/FreeBSD 的地理主机保护

dxwu /BinderFilter

A Linux kernel IPC firewall and logger for Android and Binder

vel21ripn /nDPI

Open Source Deep Packet Inspection Software Toolkit

mintyYuki /antiddos

Simple script against most network threats.

Pwnzer0tt1 /firegex

Firegex, a firewall for Attack-Defense CTFs

wirefalls /geo-nft

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

landhb /DrawBridge

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

rpthms /nft-geo-filter

Allow/deny traffic in nftables using country specific IP blocks

rfxn /advanced-policy-firewall

iptables/netfilter firewall for Linux servers with stateful filtering, trust system, ipset block lists, SYN flood protection, VNET per-IP policies, and Docker support

florianl /go-nfqueue

c-binding free API for golang to communicate with the queue subsystem of netfilter

yaa110 /rust-iptables

Rust bindings for iptables

ti-mo /netfilter

Pure-Go Netfilter Netlink family implementation.

Chromo-lib /netfilter

🧱 Netfilter - An efficient blocker for ads, trackers, coin miners, popups, annoying anti-blockers, malware sites, etc.

milesrichardson /docker-nfqueue-scapy

Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)