Arno's IPTABLES Firewall Script is a secure stateful firewall for both single and multi-homed machines. It supports NAT and SNAT, port forwarding, ADSL ethernet modems with both static and dynamically assigned IPs, MAC address filtering, stealth port scan detection, DMZ support, protection against SYN/ICMP flooding, experimental IPv6 support, multi-interface/aliased-IP support, and extensive user definable logging with rate limiting to prevent log flooding. It has plugin support to add extra features (like SSH Brute Force protection and (Racoon) IPSEC support). It is easy to configure and highly customizable. A filter script that makes your firewall log more readable is also included. License: GNU General Public License (GPL) Changes: This release fixes echo output showing hosts that shouldn't be displayed. Now IPv4 traffic will have a default policy of DROP when IPv6 is enabled and vice-versa. A LOCAL_CONFIG_FILE variable has been added to allow certain user/global/local settings to be sourced into the script. Support for plugin_status() and plugin_stop() has been implemented. Several plugins have been updated. Multiroute now has a proper stop() section, for example. An error on missing /proc/ queue_maxlen has been fixed. Support for legacy plugins has been fixed.

	Read more at FreshMeat
	www.pheedo.com/click.phdo?i=ecec78afb7d5e5e4bbf628efdca6c021