Black Box LS1016A, Руководство пользователя

Страница: 157 / 450

Chapter 3 - Additional Features
User Guide 157
called when a rule which is matched by the packet points to the chain. Each table has a par-
ticular set of built-in chains:
for the filter table :
for the nat table:
Rule
Each chain has a sequence of rules. These rules contain:
When a chain is analyzed, the rules of this chain are reviewed one-by-one until the packet
matches one rule. If no rule is found, the default action for that chain will be taken.
Syntax
An iptables tutorial is beyond the scope of this manual. For more information on iptables, see
the iptables man page (not included with the BLACK BOX
® Advanced Console Server) or
the how-to: http://www.netfilter.org or http://www.iptables.org
The syntax of the iptables command is:
iptables -command chain rule-specification [-t table] [options]
iptables -E old-chain-name new-chain-name
where: