arno-iptables-firewall 2.1.1-2 (amd64 binary) in ubuntu hirsute

 Unlike other lean iptables front ends in Debian, arno-iptables-firewall
 will setup and load a secure, restrictive firewall by just asking a few
 questions. This includes configuring internal networks for internet access
 via NAT and potential network services (e.g. HTTP or SSH).
 .
 However, it is in no way restricted to this simple setup. Some catch words
 of additional features, that can be enabled in the well documented
 configuration file are: DSL/ADSL, port forwarding, DMZ, port-scan detection,
 MAC address filtering.
 .
 Moreover, it comes with an extensive set of plugins to cover further
 requirements. For example SSH brute force protection, traffic shaping,
 traffic accounting, VPN support to just mention a few.