Each chain is a list of rules which can match a set of packets. Each rule specifies what to do with a packet that matches. This is called a target, which may be a jump to a user-defined chain in the ...

Iptables, more properly referred to as “iptables/netfilter” because of the two modules that are involved — the userspace module “iptables” and the kernel ...