> is it any Firewall and UTM SIG based on IPTables and web interface in CentOS > project? > I would like to start this if is not exist. > what's your idea? I'd join you. I'm already working on NethServer (www.nethserver.org), the UTM firewall module is still in beta but we'll release something next week. We already have a gui for port forwarding and a web proxy based on squid with tproxy and optional port 443 transparent interception. I'm already using alpha versions of snort ips and wan failover. We use shorewall as "mid layer" above iptables. -- Ciao, Filippo