IPFire vs scanlogd
IPFire
ipfire.orgscanlogd
openwall.comSide by side
| Figure | IPFire | scanlogd |
|---|---|---|
| Price from | $91.58/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 1 |
| Spec score · Intrusion Detection and Prevention Software | 9.0 (#3) | 7.4 (#22) |
| Documentation | Official documentation covers installation, WebGUI administration, firewalling, IPS, networking, VPNs, add-ons, hardware and development. | The page recommends reading the scanlogd(8) manual page and the original Phrack Magazine article. |
Plans
IPFire
- IPFireFree
- IPFire softwareFree
- IPFire Nano Appliance$749, paid once
- IPFire Mini Appliance (US)$979, paid once
- IPFire Standard Support$1,099 a year
- IPFire Enterprise Appliance (US)$4,299, paid once
In their own words
IPFire
IPFire is a free, open-source firewall and security platform for networks from home offices to global enterprises. Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection. VPN options include IPsec, WireGuard, and OpenVPN for site-to-site or remote access. A Suricata-powered intrusion prevention system detects and blocks malicious traffic using updated rule sets. IPFire includes a Squid web proxy with optional URL filtering through URLFilter or SquidGuard, and uses Red, Green, Blue, and Orange zones for roles such as trusted networks, DMZs, and Wi-Fi. Its web interface monitors bandwidth, connections, and intrusion attempts. Proxy authentication can use Microsoft Windows Active Directory, LDAP, or RADIUS. The download page offers x86_64 and aarch64 images for bare metal, virtual machines, embedded hardware, USB sticks, and SD cards; cloud images are available for AWS, Exoscale, and other providers. The project says it releases frequent security updates. Documentation, forums, mailing lists, and a bug tracker are available, and Lightning Wire Labs offers professional support.
scanlogd
scanlogd is a free TCP port scan detection tool for Linux and self-hosted deployments. It captures packets through Linux raw sockets, libnids, or libpcap. The project advises against using libpcap alone when fragmented IP packets matter, recommending libnids for non-Linux systems or monitoring an entire network. The official download page lists release 2.2.8, release files and signatures, an Openwall archive, and source browsing through GitHub. scanlogd is listed in Owl, Debian GNU/Linux, Gentoo Linux, ALT Linux, and OpenWrt, with ports in OpenBSD and FreeBSD collections. A contributed precompiled Win32 build is also linked. The project describes scanlogd as designed to be totally safe to use and points readers to its manual page and a Phrack article. Openwall offers commercial configuration, compilation, and installation support at US $250/hour with a six-hour minimum or US $9,000/week; fixed-price quotes are available for sufficiently specific projects.