nekomata_saren@tg
says to
YSITD
https://wiki.archlinux.org/index.php/simple_stateful_firewall