Also check out mason (http://users.dhp.com/~whisper/mason/). It's not a GUI, but it does have the feature that you can put it into learning mode, make connections to the firewall, and have it generate the rules needed to block that connection. Jeff