mainYet Another Firewall For GNU/Linux - Summary

 
 
Membership Info
Group Admin:
1 active member

Group identification
Id: 4761
System Name: yaffl
Name: Yet Another Firewall For GNU/Linux
Group Type: non-GNU software and documentation

Search in this Group


 

This group is not part of the GNU Project.

Welcome to Yaffl homepage.
The 1.2.x version is composed of 1 iptables script and 1 perl script (IPFREEZE) that manages automatic blacklisting. (see http://diplojuge.hosting.ipsyn.com/ipfreeze/ )

This iptables script manage the rules insertion in the running kernel and launches ipfreeze.pl. This perl script listens on the netlink device for packets that are passed by the firewall (QUEUE target). If a packet is sent, ipfreeze get the source IP and insert a new rule in the firewall that will destroy every packets coming from that IP. This rule is automatically removed after a user-definable period (usually 10 or 20min).

With this system, Yaffl proposes you features as :
- Protection from floods (like syn or ping floods)
- basic anti-nmap ports detection
- whitelist and permanent blacklist
- forbidden ports (why should someone connect to the telnet port of a firewall mmmh ?)
- Masquerading and dNAT to share your internet access.

Theses iptables scripts are inteded to be used on gnu/linux systems that are always connected to the internet or to protect small simple networks. I started to write this for my personnal purposes. I do not pretend it will give you maximum security but I have been using it from more that one year and I am very happy with it.

A french site is available at http://www.coolkeums.org/yaffl
An automatic firewall configurator is available at http://www.coolkeums.org/yaffl/configure.php

Registration Date: Tue 01 Jul 2003 12:34:47 AM UTC
License: GNU General Public License v2 or later
Development Status: 5 - Production/Stable

 

Latest News rss feed
SID Debian packages for ipfreeze perl dependances
     posted by kakadu, Thu 22 Apr 2004 06:41:30 PM UTC

Yann Dirson has packaged the needed CPAN Perl modules for ipfreeze to work. He also plans to package and submit ipfreeze in Debian unstable. Interested users should go there :
http://ydirson.free.fr/soft/debian/netfilter/

Cheers...

Ipfreeze-0.4.8 is out
     posted by kakadu, Fri 20 Feb 2004 09:47:59 PM UTC

Ipfreeze-0.4.8 has been released with new features :
  - command line options
  - user definable lists
  - user definable target for blacklisted hosts

I you want to know more, type "ipfreeze.pl --help" ;)

Yaffl-1.2-3 is out
     posted by kakadu, Sun 02 Nov 2003 02:31:39 PM UTC

I m proud to release the 1.2-3 version of Yaffl. It comes with ipfreeze-0.4.7 and is now able to protect your computer from non-TCP flood and extends forbidden ports to UDP.
It is also possible to choose the target for the non open or forbidden TCP syn ports (DROP, REJECT, TARPIT, MIRROR).
It is possible to get and configure the firewall from http://yaffl.tuxfamily.org/configure.php

enjoy

Ipfreeze-0.4.7 is out
     posted by kakadu, Sun 02 Nov 2003 02:27:01 PM UTC

This version fixes a bug present in the 0.4.6 version. It is adviced to upgrade. This new version also proposes new functionnalities :
- All IP protocols are now managed.
- UDP and ICMP are detected and notified.
- It is possible to log packets that comes from blacklisted hosts.

Enjoy.

Quick Overview
 Memberlist (1 member)

Communication Tools
 Mailing Lists (1 public mailing list)

Development Tools
 Patch Manager (open items: 0, total: 0)

Back to the top

Powered by Savane 3.13-cf05.
Corresponding source code