ipchains analysis tool?

Hi I am looking for a tool to analysis/test my ipchains rules. The problem is: I want to analyse on another computer. Something like a "firewall emulator", I tell the emulator which network devices, routing rules and ipchains rules I have and want to have a graphical frontend to show and test the ruleset. Does anybody know about such a tool or do I have to program it on my own :-) I know, there are some programs like gfcc but then I have to use X on the firewallbox and I see no reason to do that and if the box is always in operational mode testing firewall rules aren't a good idea. If there is a tool like this, please point to a web page. TIA -- ----------------- Guido Tschakert SRC, SysAd -----------------