Shorewall uses iptables, it's just a front-end. All Linux firewalls either use ipchains (old) or iptables (current). The different firewalls are nothing but different scripts, tools, and GUIs for creating the firewall itself, which is always based on one of the above two modules.
In addition to a firewall, I would suggest chkrootkit, tripwire, snort and msec (you should already have msec as part of the default Mandrake install). Oh, arpwatch can be useful, too.
|