

I

I

PREROUTING
Mangle, (D)NAT

()

FORWARD
Mangle, Filter

POSTROUTING
Mangle, (S)NAT

INPUT
Filter, Mangle

()

I

OUTPUT
Mangle, NAT, Filter

 

. 25.2.    

.    ,    , 
 (state machine),     , 
     ,   .
,        NEW
(),      ESTABLISHED (). -
    conntrack.

 OUTPUT     , -
   .  PREROUTING   -
    .     -
 ""  " "    .

        
  ,     
RETURN  RELATED.     
  ,        , 
  .

  .  (jump)   (target)  ,  -
 ,        -
  (.  ""    ).

 iptables

      iptables: ,  -
   iptables  .

 25. iptables:   759