@munin Its mostly just iptables management and some stuff like recording brutes and syn flood stuff but if your general threat level is low to moderate it's pretty fine.  Even if it's at higher levels if you don't have the money or just want something thats easy to sysadmin with a lot of intervention it works well with a few other pieces.  In general I'm fond of it because I'm one of those Unix philosophy people.  The less any given app tries to do the happier I am with it.  I have been unhappy with other firewall managers I've tried because they tend to get their thumbs in many more pies than just the firewall.