Borderline is a firewall generator. It takes a generic rule specification as input and generated an highly optimized firewall. It features IPv6 rule generation, support for multiple interfaces, and integrated support for network zones. It currently only supports firewall generation for Linux 2.6 (netfilter).
| Tags | Firewall IPv6 Linux Networking |
|---|---|
| Licenses | GPLv3 |
| Operating Systems | Linux |
| Implementation | OCaml |
Recent releases


Release Notes: This release contains improvements to the rule optimization pass and fixes a potentially serious bug in rule merging. TCP flag match has been added in order to improve packet validation.


Release Notes: The language has been stabilized and many bugs have been fixed. An option to auto-generate zone files has been added, and the rule framework has been reorganized to ease configuration. This version is ready to be tested in real production environments.


Release Notes: This release fixes a bug in the parser that rendered the system unusable. The state match has been improved, and the rule framework has been improved slightly.


Release Notes: This release is not production ready. It includes a framework for specifying rules and policies to ease firewall setup, init.d scripts, and the generator itself.