Java Firewall Project

By Angsuman Chakraborty, Gaea News Network
Tuesday, May 23, 2006

I have been playing with the idea of a Java Firewall. So far I have implemented a fully functional port blocker using port hijacking. It scans for open ports on the network interface providing internet connection.

However port blocker doesn’t a firewall make. It is merely a baby step. We need to access operating system API to be able to block ports which do not allow hijacking. We also need stealth mode to prevent attackers from even detecting the existence of the computer. We need to and can easily block UDP traffic. Then comes application access control.
All of these can be done.

I evaluated several firewalls like ZoneAlarm or Agnitum Outpost and each of them lacks in some key aspect or other. In my experience their inability is most painful for power users. So we started this intern driven project.

The question is what would be the level of interest in the user community to support a Java Firewall project.

Discussion

vinayagam
July 29, 2010: 8:19 am

i want to create a firewall in java for my final year project.can i get the coding……
pls reply me


girijesh
May 4, 2010: 7:01 am

can u send me a working coding of java firewall ??
its very urgent ….plz

January 29, 2010: 11:10 am

i want coding for firwall project in java


Saurabh Kakade
January 28, 2010: 3:55 am

java programming to check the firewall status of a system

January 4, 2010: 6:01 am

hye i want to make firewall project in java so what can i do for it and how i start it??
please give me right suggestion…


David Martineau
December 27, 2007: 2:18 pm

I think there is a definite need for a firewall that can be easily managed by a consumer. Perhaps there is one out there and I have yet to find it. I like the idea of Java, simply because it is a language I am familiar with.

Have you considered a Linksys/Linux/Java solution. Linksys as I understand it produced a version of their wireless router that can run linux. If you used linux for the OS communication and used Java to provide a web-based UI and to interact with linux and put the whole thing in a linksys like hardware– you might have something valuable.

My opinion of security at the desktop level is low. It chews up system resources and gives consumers a false sense of control. Stateful packet inspection at a hardware based firewall with the ability to establish “trust zones” or “white lists” would be invaluable.

D

August 8, 2007: 4:25 am

Khairul,

“Java is slow” is an age old myth, not reality; get over it.


khairul
November 15, 2006: 2:40 pm

from my experience using java application it is slow and memory hungry. I have to upgrade more my RAM to ensure it’s running well.

May 24, 2006: 5:38 am

> Are we there yet ?
In my preliminary investigation and prototype we have all the technologies to develop a Firewall in Java for Windows. We will however need some native calls which can be easily taken care of.

> What is going to be the overhead for a pure java implementation ?
I don’t think performance will be an issue. In any case we always have the option to use native modules. I seriously doubt we will need it.

> Will ordinary desktop users like it ?

That my friend only time will tell. It will be more functional than any of the popular Firewall in market today.

> I would think implementing it in C# (for Windoes) would be relatively easy than Java.

There are libraries to simplify JNI.

May 23, 2006: 6:10 pm

hi there,

+1.

just a moment ago, I saw someone expressing a desire for Java VOIP server. Now, you’re expressing a desire for a Firewall.

Are we there yet ? What is going to be the overhead for a pure java implementation ? Will ordinary desktop users like it ?

I can offer to test it on my box.

BR,
~A


Kris
May 23, 2006: 2:02 pm

Writing a Java firewall could be difficult because of the complexity involved with JNI. Obviously you cant write a firewall without getting into the OS’s TCP stack. It also depends on which OS you are trying to implement. You might get a lot of help with Linux but with Windows you are pretty much on your own. But that said, there are couple of implementations I saw on codeproject using managed code. Because it is easy to get at OS level APIs with C# (PInvoke and C++/CLI) I would think implementing it in C# (for Windoes) would be relatively easy than Java.

YOUR VIEW POINT
NAME : (REQUIRED)
MAIL : (REQUIRED)
will not be displayed
WEBSITE : (OPTIONAL)
YOUR
COMMENT :