Separate rule tables for different functionality

Separate rule tables for different functionality

January 10, 2024

Content #

iptables uses the concept of seperate rule tables for different kinds of packet-processing functionality. These rule tables are implemented as functionally separate table modules.

filter table #

  1. target extensions

REJECT, BALANCE, MIRROR, TEE, IDLETIMER, AUDIT, CLASSIFY, CLUSTERIP CONNMARK, TRACE, LOG, ULOG

  1. many match extensions

mangle table #

target extentions: MARK, TOS

  1. NAT Table Features

From #

Linux Security: Enhancing Security with nftables and Beyond