no-herd ipkungfu is a nice iptables firewall script