Vuurmuur - behind such a "cat" name there is a quite powerful GUI add-on for iptables. The main difference from other iptables add-ins is the presence of a console interface written in Ncurses . Therefore, administration is also easily possible via SSH or console. Vuurmuur can work with shaping, supports traffic monitoring functions, maintains individual logs, works fine on both 2.4 and 2.6 kernels and even "speaks" in Russian.
')
Opportunities
Administration
as always - iptables knowledge is not required. Quite :)
common-syntax rules
shaping
Ncurses GUI, no need for X Window.
easy port forwarding
easy NAT setup
secure default policy
full control via ssh or console (including via PuTTY for Windows)
scripts for integration with other tools
the ability to build a bash script to install iptables rules on a system without vuurmuur