Astaro Security Gateway (formerly Astaro Security Linux) is an all-in-one network security gateway that includes a firewall, intrusion protection, antivirus, spam protection, URL filtering, and a VPN gateway. Features include a modern packet filter, intrusion detection and prevention, portscan detection, application control, content filtering, virus detection for email and Web traffic, profile handling, L2TP, IPSec, SSL, and PPTP VPN tunneling, spam blocking, proxies for HTTPS, HTTP, FTP, POP3, SMTP, DNS, VoIP, SOCKS, and Ident, logging, and reporting. It supports Ethernet, VLAN, PPP, PPPoE, PPPoA, Cable Modem, IPv6, QoS, Link Aggregation, and WAN-Uplink-Load balancing in routing, and bridge mode. The WebAdmin GUI, Install Wizard, Change Tracking, Printable Configuration, and Up2Date service make it easy to install, manage, and maintain.
lftp is a sophisticated command line based file transfer program. Supported protocols include FTP, HTTP, SFTP, and FISH. It has a multithreaded design allowing you to issue and execute multiple commands simultaneously or in the background. It also features mirroring capabilities and will reconnect and continue transfers in the event of a disconnection. Also, if you quit the program while transfers are still in progress, it will switch to nohup mode and finish the transfers in the background. Additional protocols supported: FTP over HTTP proxy, HTTPS and FTP over SSL, BitTorrent protocol. IPv6 is fully supported. There are lots of tunable parameters, including rate limitation, number of connections limitation and more.
IP Tables State implements the "state top" feature from IP Filter for IP Tables. "State top" displays the states held by your stateful firewall in a "top"-like manner. Since IP Tables doesn't have a built-in way to easily display this information once, an option was added to iptstate to do this.
conexus is a generalized C++ I/O library that includes network support for IPv4 and IPv6 sockets, serial/TTY communications, kernel message queues, pipes, and files. Objects use sigc++ for signaling property changes and other information. Sub-libraries include conexus-gtkmm (provides a set of gtkmm widgets), conexus-dbus (provides dbus support for endpoints), conexus-nspr (provides NSPR endpoints), conexus-nss (provides NSS endpoints), and conexus-ssl (provides OpenSSL endpoints).
RackTables is a tool to manage tens of racks, hundreds of servers, and thousands of MAC and IP addresses. It will work with a single rack as well. It features a real-life rackspace model, typed rack objects with flexible attribute sets, a tagging system, IP address management ready for NAT, virtual routers and load balancers, accurate network connection handling, a universal search function, a multi-user access model, and an extensible dictionary.
Andrisoft WANGUARD is an enterprise-grade traffic monitoring and DDoS detection and protection solution that delivers the functionality NOC, IT, and security teams need to effectively monitor and protect their network through a single, integrated package. WANGUARD Sensor relies on sFlow, NetFlow, IPFIX, or Port Mirroring / SPAN.
Traffic Squeezer is a Linux kernel based WAN network traffic accelerator from Doublefish Solutions. It uses methods such as traffic compression, traffic PDU coalescing, protocol specific acceleration (such as TCP acceleration mechanisms), and quality of service. Traffic Squeezer also contains custom L7filters (application protocol filters), DPI (Deep Packet Engines) and so on to control and administrate your traffic. With Traffic Squeezer, you can optimize MPLS,ISDN, leased links, Satellite Networks, and Marine Internet, and even build your own custom WAN Appliance with Traffic Squeezer. A GUI is now supported via Doublefish Solution Aquarium. Aquarium is a Web-GUI that also supports Traffic Squeezer, Squid, and other open source solutions.
IPv6 CARE, "IPv6 Compliant Automatic Runtime Environment", provides an environment where applications instantly become IPv6-compliant ('patch' mode, see RFC6535). It can also generate a diagnosis about the IPv6 compliance of an application ('check' mode). It uses an LD_PRELOAD-based library injection technique.