acquired package info from repodata DB: repodata/79ff1068e9d07a15d2712f09bc476abe43ac050557d357d3f2a53b1cb7f5c522-primary.sqlite.bz2
IP packet filter administration utilities
Netfilter is a set of hooks inside the Linux kernel that allows kernel modules to register callback functions with the network stack. A registered callback function is then called back for every packet that traverses the respective hook within the network stack. Iptables is a generic table structure for the definition of rulesets. Each rule within an IP table consists of a number of classifiers (iptables matches) and one connected action (iptables target). Netfilter, ip_tables, connection tracking (ip_conntrack, nf_conntrack) and the NAT subsystem together build the major parts of the framework.