I'm writing a tool for creating a rulesset. It's meant for users who do understand the way a firewall works, but don't have any netfilter-specific knowledge. It can output a bash-script or create the rules itself.
My program (written in c) creates rules by opening a pipe to /sbin/iptables. However this is quite slow with large rulessets and on slow hardware. Is there another way, like an iptables librarycall or something? I'm going to release the tool under the GPL soon, so that shouldn't be a problem.
Regards, Victor
