The invention relates to a model for data packet forwarding, the model comprising a Java data module used for completing the conversion between user space and a Linux kernel space data format; a data forwarding library for receiving a request data transmitted from the user space and conducting operation of the request data to achieve data packet forwarding; and a Linux kernel module called by the data packet forwarding library. The model achieves data packet forwarding and all the other functions of an iptables in a very elegant manner by use of a Java API interface to support the operation of firewall rules of the iptables in the Linux kernel. The model is capable of "transparent" forwarding of a variety of communication protocols, with high operational safety of programs.