I'd love to see a GUI version of the iptables command line tool. This should display the current chains in some kind of tree layout and allow one to insert/edit/delete the live rules and save them to /etc/sysconfig/iptables. It should accept module-specific plugins just like the command line tool.