git + capistrano + shorewall = filewall. it's what you want - View it on GitHub