NuFW is an authenticating firewall. It adds strict and secure identity-based filtering capabilities to enterprise-grade firewalls. It can also set quality of service on a per-user basis and log user activities into an SQL database. Furthermore, it can use multiple external authentication sources via PAM and be the key of a Single Sign On solution.
EncFS is an encrypted pass-through filesystem which runs in userspace on Linux (using the FUSE kernel module). Similar in design to CFS and other pass-through filesystems, all data is encrypted and stored in the underlying filesystem. Unlike loopback filesystems, there is no predetermined or pre-allocated filesystem size.
Pak transfers multiple, possibly very big, regular files between possibly different hosts you have shell access to. It transmits segment IDs instead of file names and uses on-the-fly Blowfish-CBC encryption while being absolutely restartable with practically no loss of data already transmitted. Encrypted pak streams can be stored in intermediary regular files on untrusted hosts. Several stored pak streams, even truncated ones, can be merged for re-piping without decryption. Integrity is never checked. File offsets of any magnitude are supported via recompilation (the default width is 64 bits). Either UNIX 95 or UNIX 98 conformance is required and sufficient.
homeLANsecurity is a series of shell scripts for loading iptables firewall rules. The goal of these scripts is to provide an easy to manage framework for standard iptables rule sets. The scripts are well documented and are easily edited. It is primarily designed to operate on home or small office gateway Linux system, but the scripts can be easily adapted to protect an individual Linux server or workstation. homeLANsecurity's command set is written to support loading, clearing, saving, restoring, testing, and displaying of iptables rules. The configuration supports NAT, port forwarding of common services, TOS packet mangling, OpenVPN, Squid transparent proxy, IP address banning, adaptive banning, and connection tuning. Custom iptables rules are easily inserted without any editing of the scripts themselves.
Lynis is an auditing and hardening tool for Unix derivatives like Linux/BSD/Solaris. It scans systems to detect software and security issues. Besides security-related information, it will also scan for general system information, installed packages, and possible configuration mistakes. The software is aimed at assisting automated auditing, software patch management, and vulnerability and malware scanning of Unix-based systems.