LFCS · Question #220
Which of the following is not an iptables rule set?
The correct answer is A. chain. In iptables, chain refers to a sequence of rules, while mangle, filter, and nat are the names of different tables, each serving distinct packet processing functions.
Question
Options
- Achain
- Bmangle
- Cfilter
- Dnat
How the community answered
(34 responses)- A88% (30)
- B6% (2)
- C3% (1)
- D3% (1)
Why each option
In iptables, `chain` refers to a sequence of rules, while `mangle`, `filter`, and `nat` are the names of different tables, each serving distinct packet processing functions.
A `chain` is a specific list of rules within an iptables table (e.g., INPUT, FORWARD, OUTPUT), defining the order in which rules are processed, whereas `mangle`, `filter`, and `nat` are the overarching tables themselves.
`mangle` is a valid iptables table used for specialized packet modification, such as altering QoS bits or TTL values, before other tables are processed.
`filter` is a valid iptables table and is the default table, primarily responsible for making decisions about whether to allow, deny, or reject packets based on defined rules.
`nat` is a valid iptables table used for Network Address Translation, which modifies the source or destination IP addresses and ports of packets.
Concept tested: iptables tables vs chains
Source: https://manpages.ubuntu.com/manpages/jammy/en/man8/iptables.8.html
Topics
Community Discussion
No community discussion yet for this question.