Open Source Software and Freeware from JTAN

OpenBSD CD-Boot Firewall

We have developed a CD-bootable version of OpenBSD that automagically configures as a firewall, and that requires no hard disk. It can use a single read-only floppy, or a "Thumb-drive" in a USB socket for storing your custom /etc configuration.

Our current CD image is made with OpenBSD 3.5-stable.

Spamtrapd

This is a collection of perl scripts that serve as an adaptive client/server mechanism for fighting spammers. Small client scripts (spamparser.pl) watch honeypot email addresses. They fire UDP notification messages with the IP of the spammer and the "spamness" of the mail to central servers (spamtrapd) that update and maintain a DB in real time. The DB can is used by a DNSBL (blocklist-dnsd) or to update an OpenBSD pf table (spamtrapd built-in) for redirecting spammers to the spamd tarpit, or to drive procmail rules (blockcheck.pl).

These scripts work in real time, right away. Unlike most dynamic block systems, no cron job is used. The only delay is the speed of your CPU and network. A spammer can be directed to a tarpit within a few hundred milliseconds of being reported by a honeypot client.

Spammers are remembered in an internal database that is automatically managed by spamtrapd. Spammers are added and removed automatically through a spamness score decay mechanism. The daemon maintains a status web page that shows who is currently blacklisted.

Features

Real time DB updates of spammer DB

Standalone DNSBL daemon

Status Web Page

Whitelisting based on SPF records.
Read time OpenBSD pf table updates supports spamd tarpit.

Perl source code for Version 2.1 in TAR/Gzip file: spamtrapd-2.1.tar.gz DOWNLOAD

JTAN Update Daemon

This is a pair of perl scripts that allow you to replace cron for certain tasks, such as the dynamic updating of configuration files from a database. Commands can be run on a periodic basis, similarly to cron, but they can also be run on demand. A simple script can be run whenever you make changes to the database. This script sends a UDP request to the daemon, causing the appropriate update command to run immediately. Perl source code in TAR/Gzip file: jupdate.tgz DOWNLOAD