RusRoute firewall research project is flexible software IPv4 and IPv6 router and firewall, Internet gateway for Windows, it is the ideal solution for making Internet gateway for local area network (LAN) of small company, the users' traffic encountering and restricting, protection against of network attacks with functions of NAT, redirect, VPN server/client for corporate remote access, transparent proxy with port numbers saving, LAN to VPN Bridge, DHCP servers, FTP servers, multicast UDP proxies, HTTP caches, HTTP to HTTP proxy converter, captive portal feature, timed action and Splitters for rules, with advanced routing possibilities. RusRoute can also be used in firewall mode, not as a router, to protect game servers, for example.
The next functions are not supported: Captive Portal for https connections, multicast routing, https caching, content filtering, IPv6 VPN, VPN multicast.
New in version: + Added the ability to specify two IP address lists in rules, compared using AND, for more convenient work with GeoIP countries in rules. A more compact format for displaying source and destination addresses in rules has been added. + Slightly accelerated rule matching for some specific cases. + A safer way to resize hash tables in the driver, firewall, and GUI (creating a temporary object on the stack instead of in dynamically allocated memory).
New in version: + Improved performance with internal firewall structures (searching IP address lists, etc.). + Improved performance when searching for IP addresses among subnets and IP address ranges in Roskomnadzor format files. Previously, a linear search was performed; now, a tree search is used. Address ranges are, where possible, merged during loading. + Support for GeoIP - country detection by IP, GeoIP database updates via cron tab and manually. + New elements in IP address lists: "Country" and "Exclude List" (excluding IP addresses from another list). - Fixed a rare error when processing responses from the RusRoute dynamic DNS service. + Other improvements. - Minor bugs fixed.
New in version: Skip protection for Authorized IPs option- Fixed an issue with the firewall rule generator wizard that sometimes created standard network protocols with bidirectional settings of old format syntax. + Added the "Skip Anti TCP SYN DoS and DDoS protection for Authorized IPs" option to the global settings window. This option works with both kernel-mode protection (driver updated) and user-level protection. Since the driver does not contain information about firewall rules, the kernel-mode option works differently than user-level protection: the driver checks for authorized status of the source IP address of the packet. + Slightly improved display of the context menu in the Blocked IPs window. + RusRoute firewall has been tested with some DoS and DDoS stress tests.
New in version: Unidirectional protocol- Fixed an issue where fields in the "Network Protocol Information" window were incorrectly filled with default values instead of protocol properties when opening a protocol for editing. + The "Bidirectional" protocol checkbox now has three states: for two-way, one-way, and simple packet mode protocols. Simple packet mode (non-directional) packets are not displayed in the "UDP Connections" window; they can be used to more easily protect against UDP server flooding attacks if NAT is not used. When loading a configuration file from a previous version, bidirectional connection attributes are converted to the new format. + Slightly accelerated processing of TCP packets in the driver. Save Blocked IPs to file+ Option to save IP addresses to a file in the "Blocked IPs" window. - Minor bugs fixed.
New in version: - Fixed a bug in version 3.2.4 that caused a deadlock due to recursive use of a non-recursive mutex in IP packet defragmenters. - Restored the display of the "Default blocking rule" name on the Blocked IPs page.
New in version: Settings page+ Driver update: TCP SYN packet processing has been slightly accelerated by eliminating unnecessary driver processing when kernel-level Anti-TCP SYN DDoS protection is disabled. + Minor internal optimizations for data structures involving rule name strings by mapping rule names to integers, which are now used in table search keys. + Implemented Anti-DDoS UDP, ICMP, and IP flood protection algorithms for IPv4 and IPv6. These attacks are detected when the blocked and rejected packet threshold is exceeded, switching to blocking mode and collapsing the IP address of the blocked IP window into a single address to prevent excessive memory and resource consumption. + Updated the program license agreement. + Other minor improvements to the firewall and installer.