Chapter 3 - Additional Features
User Guide
157
called when a rule which is matched by the packet points to the chain. Each table has a par-
ticular set of built-in chains:
for the
filter table
:
for the
nat
table:
Rule
Each chain has a sequence of rules. These rules contain:
When a chain is analyzed, the rules of this chain are reviewed one-by-one until the packet
matches one rule. If no rule is found, the default action for that chain will be taken.
Syntax
An iptables tutorial is beyond the scope of this manual. For more information on iptables, see
the iptables man page (not included with the BLACK BOX
®
Advanced Console Server) or
the how-to:
http://www.netfilter.org
or
http://www.iptables.org
The syntax of the iptables command is:
iptables -command chain rule-specification [-t table] [options]
iptables -E old-chain-name new-chain-name
where:
