Hi, You may be interested in a Java "wrapper" that I have written for iptables, that allows you to manipulate chains and rules at a high level of abstraction. The API documentation of this Java library is available at
http://www.pitman.co.za/projects/jnetfilter/ The JNetFilter library is written in Java and uses JNI (Java Native Interface) to call C functions in the libipt library. Patrick Schaaf has pointed that the libipt functions are internal and may change, which is a pity; there really should be an API to netfilter, to allow rules to be manipulated, displayed graphically etc. You won't find the JNetFilter source code on my website yet; I want to spend a week or two cleaning it up first. It will, however, be available under the GPL licence. Rob Pitman