Endpoint Application Firewall

Host-based firewall that maps every outgoing connection to its originating process.

• Python
• Flask
• Linux
• iptables
• NFQUEUE

A host-based firewall that maps each outgoing connection to its originating process via /proc and netlink sockets, with a rule-based allow/deny/throttle policy engine. Includes a Flask REST management console for multi-endpoint administration, traffic logging, and alerts, and enforces policy on encrypted traffic using TLS metadata (JA3, SNI) rather than decryption.

Private repository / in progress