For those of you who've been lucky enough to live under a rock for the past few months, let me give you the bad news: You have new firewall/masquerading software for which to learn how to write rules. The good news is that the rules are fairly close to what the ipchains rules were. The authors also graciously included modules that allow backward compatibility while you're fumbling around in the dark. You say you don't want to upgrade? You might want to reconsider. The new IPv6 may be closer than you think. The IPv4 address space is nearly exhausted, and more people are "discovering" the Internet every day. Netfilter supports IPv6.