both the "firewalls" you listed are just iptable front ends, just thought you should know