1. A method for control and management of communication traffic, comprising the steps of: expressing access rules as filters referencing system kernel data; for outbound processing, determining source application indicia; for inbound packet processing, executing a look-ahead function to determine target application indicia; and responsive to said source or target application indicia, executing filter processing.