filtergen | packet filter generator for various firewall systems | Mehr ...
filtergen is a packet filter generator. It compiles a fairly high-level description language into iptables, ipchains, or ipfilter scripts (and has bits of support for Cisco IOS access lists).