> Iptables firewalls on a newer kernel has Amanda support built in,
> otherwise you either need gaping holes in the firewall or need to
> compile with the portrange options.  I agree that it should be a
> conf file setting, but its not. 

How new a kernel are we talking about? Is there specific support for 
Amanda, or are you just referring to the "stateful packet inspection" 
features of iptables?