The dynamic firewall daemon sets up (and optionally) maintains your
packet filter. You can connect to it via telnet or netcat, although
the port you connect to is protected by the very same firewall that
you are controlling.

To actually use this class, you must write a script.  There is an
example script in the distribution.