This script sets up a firewall for known services at Dartmouth. It honors any existing firewall, and simply adds a new chain (dartwall) that inspects INPUT traffic before the rest of the input rules. The goal is to protect sensitive services (snmp, netbackup, tripwire, etc), so that they can only be reached by the appropriate client machines.