So you can look at http://www.fwbuilder.org/ Its a great tool, supports iptables pix and some platforms more. It´s like checkpoint software, but for free :)