Another good one (although not a GUI) that I have found invaluable to me is Firehol, which takes alot of the cryptic flags out of firewall work. It might not be as visually easy to use since you still have to edit a config file, its straight forward enough to let you lock you box down sufficiently until you can get familar with iptables and start doing things by hand.