Added:
- deleted implicit rules
- object naming convention
- ip spoofing protection
- policy properties
- reject instead of drop.

needed.
- log rotation
- policy tracking

http://www.phoneboy.com
http://www.enteract.com/~lspitz
http://www.intersec.com/support/checkpt/4.htm#r_q5
http://people.netscape.com/shadow/
http://www.dataprotect.com/bh2000/blackhat-fw1.html