sunShield Pro is a GUI that enables a user to configure ipfw, the interface to the packet filtering firewall that sits in the kernel.

Although it is designed to be as simple as possible, giving access to (almost) full potential of ipfw2 on a single pane requires some knowledge about firewall rules.

sunShield Pro supports now rules packs, sunShield EXchange files, that apply a bunch of rules to match a typical configuration, along wiht the templates for specific services.

Here are some key features of "sunShield":

Core Features
· PPC and Intel ready
· Supports IPFW2, shipped with Tiger.
· Use advanced actions, and advanced protocol options.
· Easily turn firewall ON / OFF
· Create all kind of basic or dynamic rules.
· Lets you also create rule manually, from sunShield's interface.
· Review dynamic rules, time left and parent rule.
· Enforce rules based on user sending packet.
· Enable or disable logging, system wise.
· Live logs, in sunShield, lets you use ToolRules (sniffing, debugging…)
· Export rule base to an rc.firewall script, handy to deploy IPFW configuration on BSD compatible systems.
· Re-order rules with simple drag and drop.
· Edit rules with a double click on them, right click them to edit as new rule
· Automatically save and restore rules across reboots.

Extras
· Import ruleset for typical configurations, through sunShield EXchange, in one click
· Support for NATd configuration (Router mode).
· Displays information about interfaces, traffic…
· Ships with many templates, out of the box.
· Lets you create your own templates, and share them.
· Can use either interfaces' real name or BSD name.
· Available in English, French, and more to follow.


Limitations:

· 15 day expirancy.