then you need the knowledge to build and maintain it

And since Linux changes its firewall model with every major release, I'm frankly getting bored trying to keep up. Not to mention that I've not found any documention that explains iptables anything like as well as the HOWTO for ipchains did for that.