IPTables
Netfilter is a software firewall - a packet filtering framework inside the linux kernel.
It allows for:
- packet filtering
- port forwaring
- NAT
- PAT
- packet mangling
Each packet goes through firewall rules. Each rule is able to allow or block the traffic.