Have written up a firewall script based on iptables which is no doubt somewhat rough and ready. If you/anyone spots any glaring mistakes then please let me know! Used to run a similar script ages ago but have been running "wide open" for quite a while with a simple "open all up" iptables script which you will fine at the bottom of this post.
Slightly complex set up with 3 nics (LAN, Air-Stream-SKYE, Air-Stream-Betsuin) servicing 3 networks, feel free to use/modify...
#!/bin/sh
echo -e "Betsuin Firewall"
IPTABLES=/sbin/iptables
UNIVERSE="0.0.0.0/0"
ASNET="10.96.0.0/11"
ROOFIF="eth1"
SKYEIF="eth2"
LANIF="eth0"
# Local LAN
#
LANNET="192.168.0.0/24"
LANIP="192.168.0.9"
echo " Internal Network: $LANNET"
echo " Internal IP: $LANIP"