The Simple OpenBSD Firewall Interface
SOFI is written in 100% Perl which eliminates the most common type of security problem: the buffer overflow. It uses privilege separation to provide a safe compartment where the web interface is isolated from the rest of the system.
The Simple OpenBSD Firewall Interface.
"All parts should go together without forcing. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer." -- IBM maintenance manual, 1975