
iptables man Pages D-3
drop the packet on the floor. QUEUE means to pass the
packet to userspace (if supported by the kernel). RETURN
means stop traversing this chain and resume at the next
rule in the previous (calling) chain. If the end of a
built-in chain is reached or a rule in a built-in chain
with target RETURN is matched, the target specified by the
chain policy determines the fate of the packet.
TABLES
There are current three independent tables (which tables
are present at any time depends on the kernel configura
tion options and which modules are present).
-t, --table
This option specifies the packet matching table
which the command should operate on. If the kernel
is configured with automatic module loading, an
attempt will be made to load the appropriate module
for that table if it is not already there.
The tables are as follows: filter This is the
default table. It contains the built-in chains
INPUT (for packets coming into the box itself),
FORWARD (for packets being routed through the box),
and OUTPUT (for locally-generated packets). nat
This table is consulted when a packet that creates
a new connection is encountered. It consists of
three built-ins: PREROUTING (for altering packets
as soon as they come in), OUTPUT (for altering
locally-generated packets before routing), and
POSTROUTING (for altering packets as they are about
to go out). mangle This table is used for special
ized packet alteration. It has two built-in
chains: PREROUTING (for altering incoming packets
before routing) and OUTPUT (for altering locally-
generated packets before routing).
OPTIONS
The options that are recognized by iptables can be divided
Comentarios a estos manuales