sf is an extensive firewall package. It includes its own description language, that allows you to create very complex configurations.
filtering of all header fields in the IP,TCP,UDP,ICMP,IGMP packets
intelligent RIP and FTP support
dynamic rules, including counters and time-outs
extensive logging, alerting, and counter intelligence
prevention of packet and address spoofing
Please read /usr/doc/packages/sf/README.SuSE first!!!