iptables is pretty good or else u wanna code a custome one!
probably suse comes with it!(mean iptables)