Pfsense rules...in my humble opinion, does the job better than iptables. and
like John said it can be easily configured via web.
--
"It is human nature to think wisely and act in an absurd fashion."
"Todo el desorden del mundo proviene de las profesiones mal o mediocremente
servidas"