Pfsense rules...in my humble opinion, does the job better than iptables. and like John said it can be easily configured via web.

--
"It is human nature to think wisely and act in an absurd fashion."

"Todo el desorden del mundo proviene de las profesiones mal o mediocremente servidas"