For an analogous tool, see <a href="http://shorewall.net/Shorewall-Lite.html" rel="nofollow">http://shorewall.net/Shorewall-Lite.html</a> - text configuration files instead of web UI. Also, Shorewall is much more mature - although I don't know if the Shorewall-lite distributed configuration is as bulletproof as single-host Shorewall is.