nftables

UPnP IGD implementation

This repository contains a Go module to interact with Linux nftables (the iptables successor).

Generative Art Generator

Debian Gateway & DNS - <Burst Link>

🔥以社会主义核心价值观为指导思想，实现 Linux 和 MacOS 设备的全局智能分流

nftables load balancer

A simple, lightweight socks5 transparent proxy for Linux. (IPv4/IPv6/TCP/UDP over TCP)

Script to apply a Transparent proxy through Tor with nftables or iptables and can optionally forge a random MAC, localtime, ip, hostname.

Structured system configuration (I moved from NixOS to GuixSD)

Provisioning tool for systemd in initramfs (systemd-tool)

A collection of nftables, multi routing scripts, port knocked, and iptables files. To get inspiration to make your own firewalls.

Allow/deny traffic in nftables using country specific IP blocks

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

Python package to generate country-specific IP network ranges consumable by both iptables/ipset and nftables.

A good addition to your conntrack-tools package. Conntracker acts like a firewall sniffer, it analysis, realtime, with very low overhead, all iptables (or nf_tables) existing flows and inform you, at the very end of its execution, all flows in a sorted and consumable way.

Python script that generates nft maps of ip address blocks and corresponding geolocation. This data is taken from db-ip.com, so yo don't have to worry about accepting any EULA.

QoS over Nftables (This packages is merged upstream, please visit openwrt/packages and openwrt/luci for more detail)

nftables based proxy for kubernetes

Public collection of firewall dumps.

Block countries using iptables + ipset + ipdeny.com

RedisPushIptables is used to update firewall rules to reject the IP addresses for a specified amount of time or forever reject.

CNI Plugins compatible with nftables

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics

Ansible role to manage nftables.

A playground ruleset to get to know nftables syntax

CAKE QoS Script (OpenWrt)

Dynamic Outbound Firewall Authorizer

nftfw - nftables firewall builder for Debian

Using nfqueue to accept or drop flows destined for SNI domainnames

Puppet Module to manage nftables firewall rules.