I have seem a growing number of gui front ends to ipchains come out lately. Many of these are no different than doing it by hand only from a curses based template or at the other extreme in qt or gtk. Some not all will also generate the appropriate syntax for you.