Using firestarter to generate an iptables script
 

Using firestarter to generate an iptables script can be quite useful if you need to tweek or know the status of your firewall remotely and do not have X11 forwarding. The same procedure can be used with any similar GUI that sets your iptables rules.

The procedure is quite simple. With firestarter configured and your base set of rules in place and operating:

iptables-save > /etc/sysconfig/iptables
/etc/rc.d/init.d/firestarter stop
/etc/rc.d/init.d/iptables start

You can then edit /etc/sysconfig/iptables remotely and restart your firewall
/etc/rc.d/init.d/iptables restart

To see its new status:
/etc/rc.d/init.d/iptables status

Cool. Useful handy hint for anyone new to iptables.

guarddog is good at creating rulesets as well. I have used both firestarter and guarddog...both are easy to setup