{"repo":"DOWRIGHTTV/dnxfirewall","free":true,"listed":false,"github":"https://github.com/DOWRIGHTTV/dnxfirewall","clone":"git clone https://github.com/DOWRIGHTTV/dnxfirewall.git","description":"DNXFIREWALL® and DAD'S NEXT-GEN FIREWALL™, a C/CPython hybrid next generation firewall built on top of Linux and bound to kernel/ netfilter hooks for packet control.","language":"Python","stars":220,"topics":["networking","firewall","security","security-tools","antivirus","privacy","dns-over-tls","intrusion-detection","intrusion-prevention","syslog"],"license":"AGPL-3.0","category":"security-tools","readme_excerpt":"NOTICE: The license has changed from the CMD version (GPLv3). The 'FULL' version (current branch) is licensed under AGPLv3. Overview DNXFIREWALL™ is an optimized/high performance collection of applications and services to convert a standard linux system into a zone based next generation firewall. The primary security modules have DIRECT/INLINE control over all connections, streams, and messages that goes through the system. ------------------------------------------------------ (outbound) V -------------- [dns proxy ( 1)] -------- (outbound) (bi-directional) V TCP/IP stack ---- [cfirewall] ------------------- [ip proxy] ------------------------ (( packet verdict )) ---- TCP/IP stack ^ ^ (inbound) -------------- [ids/ips ( 2)] ---------- ^ (inbound) ---------------------------------------------------- --------------------------------------------------------------------------------- - ( 1) the dns proxy is specifically designed to inspect dns payload going between internal networks or from the lan to internet. - ( 2) the ids/ips is specifically designed (for now at least) to only inspect traffic from the internet to the lan networks. - this decision is based on the fact that 99.99% (generalization) of threats in this space will source from the internet. A low level \"architecture, system design\" video will be created at some point to show how this is possible with pure python. Included Features NEW: sqlite3 is now the default database in use (to simplify deployments). postgresql","default_branch":null,"files":null,"tree":[],"storefront":"/r/DOWRIGHTTV","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/DOWRIGHTTV/dnxfirewall/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}