A really great tool, though limited to the ipchains interface, is Fwctl. Much better than scripts, in my opinion.
http://indev.insu.com/Fwctl/
