On firewalls

A few recent posts on Planet Debian make me wonder why some people seem to insist on using someone else's "firewall scripts", yada yada. Personally, I just have my own #!/bin/sh in /etc/init.d which runs iptables with some appropriate options. And that's it.

Well, no, I'm lying. It also has some ip6tables lines in it. An tc. But that's really it, I swear.

So, indulge me, please. What's the great thing about these firewall ruleset generators? Apart from the fact that some of them provide a GUI to change the ruleset, which I don't care for.