firewall-automation

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Firewall in Cybersecurity

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Web Application Firewall (WAF) in Cybersecurity

Module of FreePBX (System Firewall) :: Integrated FreePBX Firewall. Uses iptables in v16 and v17, but moving to nftables in v18.

Convenient way to block countries by IP with ipset, iprange and iptables. Only couple iptables rules are added, which is easily revertable. Run services to keep geoblock persistent

Hardened Go-based IP Blocklist manager with GeoIP (ASN/Country), real-time WebSocket dashboard, RBAC, and automated webhooks.

AI-powered SSH threat detection workflow that monitors login attempts, analyzes suspicious IPs with Groq LLM, and blocks attackers via UFW after Telegram approval.

Python Personal Firewall & Network Monitor for Windows

The fastest way to block suspicious IPs in your Windows Firewall! The script utilizes the IP blacklist from stamparm's ipsum repository, an open-source project that tracks suspicious IP addresses based on various threat intelligence sources.

Auto-sync FortiGate address objects AND route-based IPsec site-to-site tunnels from an Excel sheet over SSH — add, skip duplicates, delete removed, multi-firewall, Windows service.

Designed and deployed a secure hybrid cloud architecture connecting simulated on-premise infrastructure to a containerized AWS-equivalent cloud environment using industry-standard IPsec encryption.

Lightweight Python daemon that detects SSH brute-force attacks in real time and auto-blocks IPs via UFW/iptables

An automated Security Orchestration, Automation, and Response (SOAR) tool in Python that detects ransomware behavior and deploys real-time firewall block rules.

Tutorial-guided Linux firewall defense lab using Python, Scapy, tcpdump, and iptables to detect repeated SYN activity and temporarily block source IP addresses.

Building a hardened Linux environment, security tools, and automation scripts from scratch.

Governed Check Point firewall maintenance automation with Ansible, CDT, Management APIs, and optional ServiceNow orchestration.