EtherDam

etherdam is an IPTables firewall configuration engine. It implements a primitive (and hopefully simple) scripting language as an alternative to the direct use of iptables. It comes with full documentation plus a heavily-commented example config file. The config file should work for many scenarios with minimal adjustment.