creating iptables script or package

[Rapael Morcha]

On Wed, Jun 27, 2007 at 09:06:53AM -0700, Noah wrote:
> Hi there,
> 
> I need a good program, package, and/or script that creates rather 
> complex iptables and also logs rejected and/or discarded IP packets.
> 
> Might somebody please send a recommendation of their favorite?

If I got your question correctly, there are two that might of interest.
1) Firestarter ( http://www.fs-security.com/ ) - Graphical front-end,
easy to use.
2) Shorewall ( http://www.shorewall.net/ ) - takes a bit more effort
than Firestarter but well manageable, enhanceable.

Both firewall managing script (in your words :) are based on Netfilter/Iptables. 
Meaning, they depend on it. They also possess logging capability.

If I didn't get your question right, then ask again. :)

Cheers,
Raphael