NetSecL-Firewall is an iptables script that protects against stealth scans, port scans, OS fingerprints, and other types of scanning. NetSecL-Firewall is the default firewall in the NetSecL Linux distribution and the sources are provided so it can be used also on other linux distributions. The firewall has the ability to work with Snort.
The two modes of the firewall:
- advanced - works with Snort
- standard - works without Snort
The firewall can be found here