SigFW project contains the open-source implementation of the SS7 Firewall and Diameter Firewall.

For installation and build instructions refer to thispage.

• SigFW BlackHat USA 2017 Presentation
• SigFW BlackHat USA 2017 Whitepaper

• Build in Java Maven
• Using free Telestax Mobicent/Restcomm jSS7
• License AGPLv3

• Open SS7 TCAP encryption and signing of the SS7 messages, including auto encryption setup
• SS7 SCCP blacklists (Category 0)
• SS7 TCAP blacklists (Category 1)
• SS7 MAP firewall rules (Category 2)
• Signalling IDS integration (for Category 3 and advanced detection)
• SS7 Filtering and honeypoting
• Centralized threat reporting with mThreat integration
• Collaboration with other SS7 and signaling security systems
• Management through open APIs
• Passive run (re-run traffic from pcap or passive interface to test the firewall)
• LUA programmable firewall rules
• Scalable/Decentralized solution

• Build in Java Maven
• Using free Telestax Mobicent/Restcomm jDiameter
• License AGPLv3

• Open Diameter encryption and signing of the Diameter messages, including auto encryption setup
• Diameter host and realms blacklists (Category 0)
• Diameter Command Code blacklists and Realm whitelist (Category 1)
• Diameter firewall rules (Category 2)
• Signalling IDS integration (for Category 3 and advanced detection)
• Diameter Filtering and honeypoting
• Centralized threat reporting with mThreat integration
• Collaboration with other Diameter and signaling security systems
• Management through open APIs
• Passive run (re-run traffic from pcap or passive interface to test the firewall)
• LUA programmable firewall rules
• Scalable/Decentralized solution