arno-iptables-firewall - 2.1.2-1 main

Unlike other lean iptables front ends in Debian, arno-iptables-firewall
will setup and load a secure, restrictive firewall by just asking a few
questions. This includes configuring internal networks for internet access
via NAT and potential network services (e.g. HTTP or SSH).
.
However, it is in no way restricted to this simple setup. Some catch words
of additional features, that can be enabled in the well documented
configuration file are: DSL/ADSL, port forwarding, DMZ, port-scan detection,
MAC address filtering.
.
Moreover, it comes with an extensive set of plugins to cover further
requirements. For example SSH brute force protection, traffic shaping,
traffic accounting, VPN support to just mention a few.