ZeroShell 1.0 beta1

"Zeroshell is a Linux Live CD distribution aimed at providing the main network services a LAN requires:

* Kerberos 5 authentication or with X.509 certificates;
* LDAP, NIS and RADIUS authorization;
* X509 certification authority for issuing and managing electronic certificates;
* Unix and Windows Active Directory interoperability using LDAP and Kerberos 5 cross realm authentication;
* Router with static and dynamic routes (RIPv2 with MD5 or plain text authentication and Split Horizon and Poisoned Reverse algorithms);
* 802.1d bridge with Spanning Tree protocol to avoid loops even in the presence of redundant paths;
* 802.1Q Virtual LAN (tagged VLAN);
* Firewall Packet Filter and Stateful Packet Inspection (SPI) with filters applicable in both routing and bridging on all type of interfaces including VPN and VLAN;
* NAT to use private class LAN addresses hidden on the WAN with public addresses;
* TCP/UDP port forwarding (PAT) to create Virtual Servers. This means that real server cluster will be seen with only one IP address (the IP of the virtual server) and each request will be distributed with Round Robin algorithm to the real servers;
* Multizone DNS server with automatic management of the Reverse Resolution in-addr.arpa;
* Multi subnet DHCP server with the possibility to fix IP depending on client's MAC address;
* Host-to-lan VPN with L2TP/IPsec in which L2TP (Layer 2 Tunneling Protocol) authenticated with Kerberos v5 username and password is encapsulated within IPsec authenticated with IKE that uses X.509 certificates;
* Host-to-lan VPN with PPTP protocol (Point to Point Tunneling Protocol), MPPE (Microsoft Point to Point Encryption) and GRE tunneling [...]"

http://www.zeroshell.net/eng/

http://www.zeroshell.net/eng/download/