Wolfotrack

Wolfotrack is enhancement on top of the famous Wolfenstein 3d game to link it with the Netfilter connection tracking library.

Each person is linked to a connection from the conntrack table if it exists. Everytime a door is opened this connection tracking table is refreshed.

[http://www.youtube.com/watch?v=z3zRnHPFPrc See Youtube video to see wolfotrack in action]

Download

Download stable release (wolfotrack-1.1.tar.gz)]

  • Browse source code
  • Download development version using Subversion: 
    svn co http://software.inl.fr/svn/mirror/tools/wolfotrack
  • Shareware data files:

http://www.wallinfire.net/files/wolf3d-data_nupik-shareware.tar.gz

Wall of quotes

"With wolfotrack, I look forward new connections. Banning p2p has
never been so fun !"
   -- Pascal Terjan, Mandriva kernel team

"Obviously the most significant new firewall GUI for productivity
increases and stopping real time attacks, since X-Window came out...
the best way for firewall admins to understand what's going on, track
it down, and kill it."
   -- Dragos Ruiu, (Can|Eu|Pac)Sec(West|) organizer

"Wolfotrack is the synthesis of the tremendous INL's experience on firewall GUI.
It overruns all existing interfaces by providing amazing productivity increase
for firewall administrator"
   -- Eric Leblond, NuFW author and INL co-founder

"Wolfotrack is the most comprehensive, cutting edge, visionary tool for
slaying evil guys connections as they come through, in real time, before
they can harm you for good."
   -- Cedric Blancher, Computer Security Researcher

"Wolfotrack is the definitive tool of the IT industry to enhance
real-time interactive firewalling. Never ever the system administrator
had that much fun protecting his network. This game truly proves how
easy can be to use of the next generation Netfilter firewall GUI."
   -- Pablo Neira Ayuso, Netfilter core-developer

Compile and use

You need the [http://www.netfilter.org/projects/libnetfilter_conntrack/index.html libnetfilter_conntrack] and the SDL library.

The Makefile is generated using cmake: 

cmake .

Now, you can compile the software with : 

make

You can now copy sdlwolf3d inside the data directory.

After, you must activate the connection tracking using: 

# iptables -A OUTPUT -m state --state ! INVALID -j ACCEPT

However, if you really want to kill your connections, you can use: 

# iptables -P INPUT DROP
# iptables -P OUTPUT DROP
# iptables -A OUTPUT -m state --state ! INVALID -j ACCEPT
# iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

And do not forget to run wolfotrack as root ;-) 

$ sudo ./sdlwolf3d x3

Other Netfilter conntrack handling tools

  • conntrack-tools : A set of command line utils and daemon to handle conntrack.
  • NuConntrack: Daemon and web interface to list and modify conntrack entries.

Attachments