Iptables Essentials: Common Firewall Rules and Commands.

An execution engine for Wireshark-like filters

Windows Firewall Notifier extends the default Windows embedded firewall by allowing to handle and notify about outgoing connections, offers real time connections monitoring, connections map, bandwidth usage monitoring and more...

🚦 Block malicious crawlers with Cloudflare Firewall Rules

PowerShell scripts to automatically create rules for Windows firewall

Automated OWASP CRS and Bad Bot Detection for Caddy, Nginx, Apache, Traefik and HaProxy

IP leak prevention for OpenVPN

Rules of Cloudflare Firewall for Block Bad Bot and Exploiting

Ansible role for hardening Linux

开源威胁情报，包含3个组件，2个查询API，1个前端，300万+恶意IP，Go +Redis开发的威胁情报查询API性能良好，恶意IP一直在更新。

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Block hosts that attempt to bruteforce SSH using the journald API.

Anti DDOS Protection that will stop DDOS from taking down your Linux Server

Application allows to block Internet access to other applications / Приложение позволяет заблокировать доступ в интернет другим приложения

A Python SDK for Tufin Orchestration Suite

DirectFire Firewall Converter - Network Security, Next-Generation Firewall Configuration Conversion, Firewall Syntax Translation and Firewall Migration Tool - supports Cisco ASA, Fortinet FortiGate (FortiOS), Juniper SRX (JunOS), SSG / Netscreen (ScreenOS) and WatchGuard (support for further devices in development). Similar to FortiConverter, Sm…

Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)

🚀 INFRA: your infrastructure as a GraphQL service

🧱 Ban subnets using Windows Firewall rules after they make enough incorrect login attempts, as indicated by Windows Event Log records.

Fail2Ban setup that monitors UFW logs to detect and dynamically blacklist systems that are port-probing your server. Also monitors SSH as normal.