Lately i've been singing the praises of the iptables part of the netfilter project for linux - and i still think there's nothing better for making your own custom built firewall, but over the weekend...