SysAdminGear

Shorewall is a high-level tool for configuring Netfilter.

How Shorewall works?
You describe your firewall/gateway requirements using entries in a set of configuration files, Shorewall reads those configuration files and with the help of the iptables utility, Shorewall configures Netfilter to match your requirements.

Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode; as a consequence, Shorewall can take advantage of Netfilter's connection state tracking capabilities to create a stateful firewall.

shorewall.net

DOWNLOAD Shorewall