Could you recommend a few? Any ones that aren't simply a front-end for iptables? Unfortunately most, if not all of them are just front-ends to IPtables.