ferm is a tool to maintain complex firewalls, without having the trouble to rewrite the complex rules over and over again.