Is there any *nice* iptables/ip6tables frontend which does both v4 and v6, is simple to configure, but not simplistic or inflexible?