Intent to package: mason
...once my developer application is approved.
Mason is a firewall configuration tool that works "by example"; it can
watch the connections you're making and create rules to allow/block
those particular connections.
It's pretty snazzy; it supports both ipfwadm and ipchains, supports some
rather complex protocols, will do the TOS flag, will set up masq for
you. It even can be persuaded to output Cisco firewall rules.
Best of all, it's GPL. For more info: