features
""""""""
 + 


rationale
"""""""""
 + A simple modular Bash script (Keep it simple, stupid)
 + Implements a lot of services (and protocols)
 + Generates iptables-code (for easy debugging, testing and inspection)
 + Forces to use a well-defined structure
 + Allows easy maintenance and decreases chance of user faults
 + Very strict (=secure) by nature
 + Ready to be used with ipfwadm, ipchains or other backends 
 + Rule sets can be compiled offsite or remotely and doesn't need root privileges
 + Takes care of backing up old rule sets, syntax checking, comparing rule sets...


commando's
""""""""""
dwall			firewall script
dwall-debug		prints debugging information (aliases, zones, config, ...)
dwall-test		test firewall script and restores after 1min


config-files
""""""""""""

