LX0-104 · Question #220
Which of the following is not an iptables rule set?
The correct answer is A. chain. Iptables organizes rules into distinct tables for different packet processing stages, and 'chain' is a component within these tables, not a table itself.
Question
Options
- Achain
- Bmangle
- Cfilter
- Dnat
How the community answered
(41 responses)- A88% (36)
- B7% (3)
- C2% (1)
- D2% (1)
Why each option
Iptables organizes rules into distinct tables for different packet processing stages, and 'chain' is a component within these tables, not a table itself.
A 'chain' is a named sequence of rules that are traversed in a specific order within an iptables table, such as the INPUT, FORWARD, or OUTPUT chains, but it is not a top-level table itself.
The 'mangle' table is a valid iptables rule set used for altering packet headers, such as TTL or TOS.
The 'filter' table is a valid iptables rule set and is the default table, primarily used for allowing or denying packets.
The 'nat' table is a valid iptables rule set used for Network Address Translation, modifying packet source or destination addresses/ports.
Concept tested: Iptables tables vs chains
Source: https://man7.org/linux/man-pages/man8/iptables.8.html
Topics
Community Discussion
No community discussion yet for this question.