7. How did I obtain this knowledge?

Just looking at code in iptables 1.2.6 package and especially at program iptables-save.c that use libiptc to dump information from firewalling kernel code.

I will try to be very pragmatic and clear in order to make this HOWTO useful.