nerdexam
Linux_Foundation

LFCS · Question #220

Which of the following is not an iptables rule set?

The correct answer is A. chain. In iptables, chain refers to a sequence of rules, while mangle, filter, and nat are the names of different tables, each serving distinct packet processing functions.

Submitted by ahmad_uae· Apr 18, 2026Networking

Question

Which of the following is not an iptables rule set?

Options

  • Achain
  • Bmangle
  • Cfilter
  • Dnat

How the community answered

(34 responses)
  • A
    88% (30)
  • B
    6% (2)
  • C
    3% (1)
  • D
    3% (1)

Why each option

In iptables, `chain` refers to a sequence of rules, while `mangle`, `filter`, and `nat` are the names of different tables, each serving distinct packet processing functions.

AchainCorrect

A `chain` is a specific list of rules within an iptables table (e.g., INPUT, FORWARD, OUTPUT), defining the order in which rules are processed, whereas `mangle`, `filter`, and `nat` are the overarching tables themselves.

Bmangle

`mangle` is a valid iptables table used for specialized packet modification, such as altering QoS bits or TTL values, before other tables are processed.

Cfilter

`filter` is a valid iptables table and is the default table, primarily responsible for making decisions about whether to allow, deny, or reject packets based on defined rules.

Dnat

`nat` is a valid iptables table used for Network Address Translation, which modifies the source or destination IP addresses and ports of packets.

Concept tested: iptables tables vs chains

Source: https://manpages.ubuntu.com/manpages/jammy/en/man8/iptables.8.html

Topics

#iptables#firewall#networking basics#packet filtering

Community Discussion

No community discussion yet for this question.

Full LFCS Practice