Recently, I'm reading Linux Kernel Networking. It says Netfilter has 5 mount points, that is pre_routing, post_routing, local_in, local_out and forward. iptables has 5 tables, mangle, nat, filter, security and raw as well. I'm wondering whether there's some relation between them. If not, why iptables has just 5 tables? Another curious question, is it possible to add new table ?

  • Have a look at the chains inside the tables, you'll find PREROUTING, POSTROUTING, INPUT, OUTPUT, FORWARD. Now compare those with the netfilter "mount points"... And you can create new chains, but not new tables. – dirkt Nov 8 at 10:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.