iptables & Netfilter

[ltnhan]

Dear all,

Could any one help me understand the relation between iptables & netfiler package? Thank you very much and appreciate for help. and this is my question:

Is that iptable must work with netfilter package? My meaning is netfilter working in kernel moudle capture all traffic packets and iptable is the tools running on userspace set the rule for handle that packet.
iptable & netfilters, does those package is built in linux kernel?
Nhanle

[anomie]

Go to the source: http://www.netfilter.org/

[matthewa]

Netfilter = kernel space. This is where the actual packet filtering takes place.

Iptables = Userspace. This is where you build your rulesets.


In other words, iptables is just a module that the user can use to build and then upload packet filtering rules to the Netfilter module. Netfilter module is where all the work is done.