Jay's Iptables Firewall

Jay's Iptables Firewall is an easy-to-install bash script firewall for Linux systems that was developed for home LAN networks but can be adapted to any type of network. One of its main features is the ability to share internet over a LAN and forward TCP or UDP ports over a LAN. This is useful for programs that require a direct connection to the internet, such as ICQ, eDonkey, and KaZaA.

The firewall provided is very restrictive, with all incoming traffic blocked, except for a few exceptions. It carries out extensive filtering of IP, TCP, UDP, and ICMP headers, as it offers protection from DDOS attacks, Smurf attacks or other attacks from invalid IP sources. The configuration of the firewall is made easy with the firewall-config.pl script, which can be utilized to generate an empty configuration file that can be then configured by hand. For interactive configuration assistance, the script can be executed with the "-g" parameter.

Jay's Iptables Firewall offers access control to TCP/UDP ports, TCP/UDP Flags Control, ICMP Control, UDP/TCP forwarding, synflood control, spoofing control, denial of hosts (IP/MAC), a spyware IP list, NAT/Masquerading for internet sharing over a LAN, support for tunneling with restricted access to ports, multiple internal and external interfaces, setting up of Type of Service (TOS), custom rules, pre/post scripts and support for ZorbIPTraffic, and log of bad attempts.

To install, users must ensure that they have iptables, Perl, kernel >= 2.4, and Dialog >= 0.9a-20020309a installed. Then, depending on the distribution being used, the corresponding instructions for installation can be followed.

In the latest release, Jay's Iptables Firewall has fixed several known bugs, including the "Couldn't load target `JAY_CHECK_TCP'" bug and the "ALLOWED_PING doesn't work anymore" bug. Overall, Jay's Iptables Firewall offers a comprehensive and reliable firewall solution for Linux systems that can be extended to meet the needs of any network.