Awesome Cybersecurity Blue Team
Section: Firewall appliances or distributions · Hardened GNU/Linux based router and firewall distribution forked from IPCop.
StaleScore 55
Entry
IPFire
Appears in 5 awesome lists
Hardened Linux firewall with a security-first philosophy, splitting networks into color-coded trust zones (LAN, DMZ, wireless, internet) so untrusted devices are contained by default configuration. Lighter than pfSense and OPNsense, easier to harden, and maintains a strong security patch delivery…
Found in these lists
Awesome Sysadmin
Section: Router · Free network firewall distribution, based on the Linux operating system with easy-to-use web management console. (Source Code) GPL-2.0 Shell/PHP/Other
FreshScore 96
Hacking Tools
Section: Firewall & Perimeter Security · Hardened Linux firewall with a security-first philosophy, splitting networks into color-coded trust zones (LAN, DMZ, wireless, internet) so untrusted devices are contained by default configuration. Lighter than pfSense and OPNsense, easier to harden, and maintains a strong security patch delivery…
FreshScore 91
Awesome Privacy
Section: Self-Hosted Network Security · A hardened, versatile, state-of-the-art open source firewall based on Linux. Its ease of use, high performance and extensibility make it usable for everyone.
FreshScore 94
Awesome Privacy
Section: Routers · Hardened Linux firewall distribution with intrusion prevention and a web interface.
FreshScore 98
Often listed next to it
OPNsense
is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable…
In 12 listsDetails
pfSense
The most widely deployed open-source firewall with the largest community and extensive third-party documentation, built on FreeBSD with a browser-based management interface. Available in Community Edition (open source) and pfSense Plus (commercial). Known for extremely stable long-running…
In 10 listsDetails
Snort
Snort is a free and open source network intrusion prevention system (NIPS) and network intrusion detection system (NIDS)created by Martin Roesch in 1998. Snort is now developed by Sourcefire, of which Roesch is the founder and CTO. In 2009, Snort entered InfoWorld's Open Source Hall of Fame as one…
In 10 listsDetails
OpenWrt
Plenty of scope for customization and a ton of supported addons. Stateful firewall, NAT, and dynamically-configured port forwarding protocols (UPnP, NAT-PMP + upnpd, etc), Load balancing, IP tunneling…
In 4 listsDetails
DD-WRT
Easy and powerful user interface. Great access control, bandwidth monitoring and quality of service. IPTables is built-in for firewall, and there's great VPN support as well as additional plug-and-pla…
In 3 lists
VyOS
Open-source network operating system providing routing alongside firewall features, using a command-line configuration model similar to Juniper or Cisco rather than a web-managed appliance interface. Suited for network engineers who need advanced routing capabilities combined with firewall…
In 3 lists
tnodir/fort
Windows-only open-source firewall built on the Windows Filtering Platform, providing app groups, wildcard path matching for folder-level blocking, and rate limiting. Excels at distinguishing individual services sharing svchost.exe, allowing one specific service to be blocked without disrupting the…
In 2 lists
Fortinet FortiGuard IPS
Deep packet inspection and virtual patching integrated within the Fortinet Security Fabric, with frequent signature updates from FortiGuard Labs covering newly disclosed CVEs in commercial software, network devices, and web applications. Demonstrates lower false positive rates than anomaly-based…