Matching packets are passed to a userland program for processing
Userland program returns a verdict of either ACCEPT or DROP
libipq provides a mechanism for this kernel interaction
IPTables::IPv4::IPQueue is a perlxs interface to libipq