Arno's IPTABLES Firewall Script is a secure stateful firewall for both single and multi-homed machines. It supports NAT and SNAT, port forwarding, ADSL ethernet modems with both static and dynamically assigned IPs, MAC address filtering, stealth port scan detection, DMZ support, protection against SYN/ICMP flooding, experimental IPv6 support, multi-interface/aliased-IP support, and extensive user definable logging with rate limiting to prevent log flooding. It has plugin support to add extra features (like SSH Brute Force protection and (Racoon) IPSEC support). It is easy to configure and highly customizable. A filter script that makes your firewall log more readable is also included. License: GNU General Public License (GPL) Changes: This release implements check-conf argument to only perform a sanity check. The no_broadcast code has been fixed. A highly experimental IDS plugin has been added. A blockall argument has been added. LOOSE_UDP_PATCH has been deprecated. This release has switched from /proc to sysctl for setting kernel options. Unreferenced get_protos_ip has been fixed. There are miscellaneous fixes.

	Read more at FreshMeat
	www.pheedo.com/click.phdo?i=6919645595fc4d7e5c0220e905ec32a5