Astaro Security Gateway (formerly Astaro Security Linux) is an all-in-one network security gateway that includes a firewall, intrusion protection, antivirus, spam protection, URL filtering, and a VPN gateway. Features include a modern packet filter, intrusion detection and prevention, portscan detection, application control, content filtering, virus detection for email and Web traffic, profile handling, L2TP, IPSec, SSL, and PPTP VPN tunneling, spam blocking, proxies for HTTPS, HTTP, FTP, POP3, SMTP, DNS, VoIP, SOCKS, and Ident, logging, and reporting. It supports Ethernet, VLAN, PPP, PPPoE, PPPoA, Cable Modem, IPv6, QoS, Link Aggregation, and WAN-Uplink-Load balancing in routing, and bridge mode. The WebAdmin GUI, Install Wizard, Change Tracking, Printable Configuration, and Up2Date service make it easy to install, manage, and maintain.
IP Tables State implements the "state top" feature from IP Filter for IP Tables. "State top" displays the states held by your stateful firewall in a "top"-like manner. Since IP Tables doesn't have a built-in way to easily display this information once, an option was added to iptstate to do this.
conexus is a generalized C++ I/O library that includes network support for IPv4 and IPv6 sockets, serial/TTY communications, kernel message queues, pipes, and files. Objects use sigc++ for signaling property changes and other information. Sub-libraries include conexus-gtkmm (provides a set of gtkmm widgets), conexus-dbus (provides dbus support for endpoints), conexus-nspr (provides NSPR endpoints), conexus-nss (provides NSS endpoints), and conexus-ssl (provides OpenSSL endpoints).
Andrisoft WANGUARD is an enterprise-grade traffic monitoring and DDoS detection and protection solution that delivers the functionality NOC, IT, and security teams need to effectively monitor and protect their network through a single, integrated package. WANGUARD Sensor relies on sFlow, NetFlow, IPFIX, or Port Mirroring / SPAN.
IPv6 CARE, "IPv6 Compliant Automatic Runtime Environment", provides an environment where applications instantly become IPv6-compliant ('patch' mode, see RFC6535). It can also generate a diagnosis about the IPv6 compliance of an application ('check' mode). It uses an LD_PRELOAD-based library injection technique.
smtp-cli is an SMTP command line client with support for advanced features such as STARTTLS, SMTP-AUTH, or IPv6. It also has scriptable message composition capabilities supporting anything from simple plain-text messages right up to building complex HTML emails with alternative plain-text part, attachments, and inline images. It's also a convenient tool for testing and debugging SMTP servers' setups. smtp-cli can be used to check a given server's capabilities, to test your server's setup, or to create and dispatch email messages. The command line interface is intuitive, and everything is scriptable and can run in a completely non-interactive mode from scripts or cron jobs. smtp-cli is ideal for shipping log files from remote machines, running periodic mail delivery test loops, etc.
Borderline is a firewall generator. It takes a generic rule specification as input and generated an highly optimized firewall. It features IPv6 rule generation, support for multiple interfaces, and integrated support for network zones. It currently only supports firewall generation for Linux 2.6 (netfilter).