Open Source PHP Firewall Software

BASE is the Basic Analysis and Security Engine. It is based on the code from the Analysis Console for Intrusion Databases (ACID) project. This application provides a web front-end to query and analyze the alerts coming from a SNORT IDS system.

The package includes tools that make a fully functional user accounting system for a small ISP. Functionality includes: traffic shaping, management of users' accounts, firewall, network monitoring, link quality measurement, alert system, etc.

This is a simple Webinterface to ban or unban IPs with Fail2Ban. Written in PHP. Uses fail2ban-client operations on the local socket. Questions? Contact me: steffen[at]simails.de Update for Debian 13 Trixie and others running systemd: To get the socket-permission fix working, do this: 1. systemctl edit fail2ban [Service] ExecStartPost=/bin/sh -c 'while [ ! -S /var/run/fail2ban/fail2ban.sock ]; do sleep 0.2; done; chmod 0766 /var/run/fail2ban/fail2ban.sock' -> strg+o, strg+x 2. systemctl daemon-reload 3. systemctl restart fail2ban 4. ls -l /var/run/fail2ban/fail2ban.sock

ANDURAS SurfProtect is a PHP application that can be used for virus-scanning withing the application-layer (ISO/OSI) Either http and ftp protocols are already supported within the beta version.

CACANMS is an acronym for Computer Aided Campus Area Network Management System. The system consists of software components and a library of about 60 classes. It is divided into three types of subsystems which reside on different servers and communicate.

Web interface written in php for ISC bind and ISC dhcp configuration and administration. It keeps it's own database containing general dns and dhcp information and information about subnets, hosts etc. Configures DNS, DHCP, firewalls, RADIUS servers..

This product is no longer maintained: The author created alternative tools: https://databunker.org/ and https://privacybunker.io/ GreenSQL is a database firewall engine used to protect Open Source Databases from SQL injection attacks. It works in proxy mode. Application logic is based on evaluating of SQL commands using risk score factors, as well as blocking of sensitive commands

A collection of PHP scripts to manage a gateway server using Linux's Netfilter (iptables) & ISC's DHCPd v3. It allows mac address restriction and web-based configuration.

Open Source software for web-based management of system and network security policies and Iptables firewall rules

Nuri is a pool of functions useful in complex network&devices management, almost tied on Cisco HW. She will help you in analysis and maintenance of very huge configs and/or topological complex networks. have fun. $witch

Web reverse proxy for Single Sign On (SSO). It can apply a security policy (profiles stored in a LDAP directory) to an existing set of applications, consolidate websites, encrypt all communications, rewrite simple URLs...

Security-Tools Database is an easy to use tool to manage tool-tipps (e.g. from the SecurityFocus.com Newsletters and other sources). Simply copy + paste tipps from the newsletter or enter tipps manually. Finds tools by any combinations of search criteria.

Traffic accounting and billing system for FreeBSD using ipacctd, ipfw, php and MySQL. User management and statistic output throught web-interface.

Valkyrja (Php Firewall front-end) is a web-based tool to administrate a linux firewall based on iptables. Valkyrja is modular, everyone can write a component for it. As Soon as possible: squid manage, NAT manage

XSServer is a system, which is intented to be an easy way to configure dhcp, iptables and squid in order to make possible to have those working together at once, generating the needed config files for each.

IPChains Logger aims at providing an useful utility to track bandwidth usage from workstations behind a firewall. It works well for masqueraded machines.

UCAS or Universal Central Admin System.Client to Server API system for administrating Unix/Linux/BSD systems that allows a quick and effective method for keeping control of all your servers in one central system.