(Chain and table table filter: As per the text, when used for filtering nat: As per the text, when used for NAT NAT: NetworkAddressTranslator chain INPUT: located in the filter table, the matching intent IP is the local data packet FORWARD: located in the filter table, matching wear The data packets passing through the machine, PREROUTING: located in the nat table, used to modify the intent address (DNAT) POSTROUTING: located in the nat table, used to modify the source address (SNAT)
iptables.pdf)