ipchains is really nice. And free