ipkungfu is a nice iptables firewall script