IPTables

• Uses Netfilter to inspect and alter packets

• Three tables:

• NAT – alters SA and DA fields

• Mangle – alters other fields, e.g., TOS

• Filter – does not alter any fields – evaluation only

• The tables contain chains

Notes: