"ferm" is also a nice readable wrapper for iptables.