A really great tool, though limited to the ipchains interface, is Fwctl.
Much better than scripts, in my opinion.
http://indev.insu.com/Fwctl/