Martin Hauke
mnhauke
Involved Projects and Packages
The FireWall KNock OPerator implements an authorization scheme called
Single Packet Authorization (SPA), based on Netfilter and libpcap.
Its main application is to protect services such as OpenSSH with an
additional layer of security in order to make the exploitation of
vulnerabilities (both 0-day and unpatched code) much more difficult.
Fwknop GUI is a graphical user interface integrated with an Fwknop
client that provides the ability to send SPA packets to a remote
Fwknop server, as well as a front-end for creating and managing client
configurations for multiple Fwknop servers.
It supports exporting saved configuration data to a QR code format
readable by the Android client, as well as to the .fwknoprc format
readable by the command line client.
Glorytun is a small, simple and secure VPN over MUD.
MUD (Multipath UDP Deflector) is a secure, multipath network protocol
over UDP.
The key features of Glorytun come directly from MUD:
* Fast and highly secure
* Multipath and failover
* Traffic shaping
* Path MTU discovery without ICMP
GoBGP is an open source BGP implementation designed from scratch for
modern environment and implemented in Go. It is designed to exploit
multicore processors and can be easily integrated with othersoftware
through an RPC API.
A GSSAPI Mechanism that implements NTLMSSP
llmnrd is a daemon implementing the Link-Local Multicast Name Resolution (LLMNR)
protocol according to RFC 4795. It currently only supports Linux, as it uses the
netlink kernel interface.
llmnrd will respond to name resolution queries sent by Windows clients in
networks where no DNS server is available. It supports both IPv4 and IPv6.
ndppd is a daemon that proxies certain IPv6 NDP messages between two or more
interfaces. It currently supports proxying Neighbor Solicitation Messages
and Neighbor Advertisement messages in order to allow IPv6 routing without
relying on Linux "proxy_ndp".
The daemon is partially compliant with (experimental) RFC4389.
OpenBFDD is an open source package that provides a software based
implantation of the Bidirectional Forwarding Detection (BFD) protocol. It
is designed to run on a server. Its primary purpose is to allow the
administrator to quickly take the server off-line when the core service,
such as a bind or unbound server, goes down. This is done by providing a
BFD "beacon", bfdd-beacon, that can communicate with a properly
configured, BFD enabled, router. A control utility, bfdd-control, can be
used to configure the running bfdd-beacon daemon, and to change the state
of its BFD sessions.
bgpd is a Border Gateway Protocol (BGP) daemon which manages the network
routing tables. Its main purpose is to exchange information concerning “network
reachability” with other BGP systems. bgpd uses the Border Gateway Protocol,
Version 4, as described in RFC 4271.
pTFTPd is a collection of tools related to TFTP. It includes a TFTP server,
a TFTP client, and a complete PXE solution based on this TFTP server and a
micro-DHCP or BOOTP server. All these tools are written in Python and designed
to be fast, RFC compliant and easy to use.
Available tools include:
* bootpd : a BOOTP server (RFC951 and RFC1497 compliant)
* dhcpd : a simple, stripped-down DHCP server.
* ptftpd : the TFTP server (RFC1350, 2347, 2348 and 2349 compliant)
* pxed : a one-call PXE server using dhcpd and ptftpd.
* ptftp : a simple TFTP client (RFC1350, 2347, 2348 and 2349 compliant
and capable)
Perform lookups by ip address and return ASN, Country Code,
and Netblock Owner.
The radcli library is a library for writing RADIUS Clients. The library's
approach is to allow writing RADIUS-aware application in less than 50 lines
of C code. It was based originally on freeradius-client and is source compatible
with it.
This small program receives UDP datagrams on a given port, and resends
those datagrams to a specified set of receivers.
In addition, a sampling divisor N may be specified individually for each
receiver, which will then only receive one in N of the received packets.
Optional spoofing is also supported.
Slirp is a TCP/IP emulator which turns an ordinary shell account
into a (C)SLIP/PPP account. This allows shell users to use all the
funky Internet applications like Netscape, Mosaic, CUSeeMe, etc.
Please note that maybe your ISP really doesn't like you using slirp,
because they want to charge more for a ppp connection, so use it at
your own risk.
SMCRoute is a UNIX/Linux tool to manage and monitor multicast routes.
It supports both IPv4 and IPv6 multicast routing.
SMCRoute can be used as an alternative to dynamic multicast routers like
mrouted or pimd in setups where static multicast routes should be
maintained and/or no proper IGMP or MLD signaling exists.
Multicast routes exist in the UNIX kernel as long as a multicast routing
daemon runs. On Linux, multiple multicast routers can run simultaneously
using different multicast routing tables.
A tool for measuring SMTP server delay, delay variation and throughput.
Simple Service Discovery Protocol daemon (SSDP) for networked Linux
devices. Useful for small and embedded systems that want to announce
themselves to systems running Windows.
ssdpd is a stand-alone UNIX daemon with no external dependencies but
the standard C library. It has a built-in web server for serving the
UPnP XML description which Windows use to present the icon, by default
an InternetGatewayDevice is announced.
An excellent choice for those of us who never wanted to learn every
config file format on this planet. uftpd has no configuration, and
starts automatically from the traditional UNIX inetd super server,
neatly tcpwrapped for your safety.
Hardcore Internet users and anyone concerned about security should
probably consider a separate TFTP server and for FTP look at one of:
vsftpd, proftpd or pure-ftpd.
