SOFI is a complete firewall solution for OpenBSD. It is designed for use as an Internet gateway to share an Internet connection among several computers. It provides network address translation (a.k.a. IP masquerading), packet filtering, port forwarding, DNS service, DHCP service, VPN service, and traffic statistics.
Swan is a bandwidth manager and Internet gateway that effectively controls and manages the collective bandwidth of an organization. As an Internet gateway it includes a transparent proxy, caching engine, access control lists, caching DNS server, logging and monitoring tools, an authentication mechanism, bandwidth clubbing, and policy management. It is ideal for ISPs, corporations, schools, colleges, etc. Both GUI and console-based interfaces are available for controlling the software. Installation is through a bootable CD that automatically formats the system.
Enhanced Reverse Pimpage is an enhanced version of the original rpimp by Matt Miller. Reverse Pimpage was designed to allow you to access a computer that is behind a firewall from outside that firewall itself. The way it accomplishes this is by having the client (the computer behind the firewall) send a SYN request to a certain port at certain intervals. The computer that will access the client must run the server program, and when the time interval is up it will connect. Once it's connected, the client telnets to itself and routes data back and forth between the two.
Vanguard provides enterprise class anti-virus and anti-spam protection to multiple internal mail servers, including the Gordano Messaging Suite, Microsoft Exchange, and IBM Lotus Notes/Domino. Dual anti virus scanning engines provide both traditional signature based virus protection and advanced Zero Hour protection. Any number of internal servers can be protected from a single Vanguard server. Each of those servers may be servicing the same Internet domain, separate Internet domains, or even multiple Internet domains on a single server. There is no limit to the number of protected domains or message throughput.
vpn-shaper is a dynamic traffic shaper for openvpn, poptop, and similar programs, using iproute2. It allows shaping of traffic between many users conected to one server, and it supports different prioritiy schemes for different users and different types of traffic. Trafic shaping uses the HTB qdisc. Prioritization uses l7-filter and ipp2p and some of the patch-o-matic extensions. Classification of trafic in HTB classes is done by using the IPMARC patch-o-matic extension. vpn-shaper requires the IPMARK patch-o-matic extension, connmark iptables match, and HTB qdisc.
Extensible Messaging Platform is a spam-filtering firewall server application. It protects any SMTP mail server from spam, email- orne viruses (including dangerous auto-launch viruses) and other objectionable content. It filters mail using complex contextual signatures (not simple keyword lists). The use of contextual signatures results in high success and extremely low false-positive rates. Additional features include automatic XML extraction/database insertion, optional POP3 retrieval, comprehensive user-definable contextual filtering, content-based message routing and developer API.