Last updated on
Linux Firewall -- iptables
netfilter/iptables project homepage - The netfilter.org project
- iptables → netfilters
- 表并不是最重要的，重要的是在不同的角色中，数据包的流向/流程
- DNAT 在路由判断前执行
- SNAT 在包出设备前执行
Computer Networking Fundamentals
This colorful series walks you through the networking basics in just a few thousand words! It also offers hands-on labs to practice the obtained knowledge.
连接跟踪（conntrack）：原理、应用及 Linux 内核实现
Illustrated introduction to Linux iptables
What are iptables chains, rules, policies, and tables? Describe iptables in layman’s terms.
网络错误跟踪
使用nettrace可以直接跟踪网络错误，譬如iptables相关的Stack
nettrace is a eBPF-based tool to trace network packet and diagnose network problem. - OpenCloudOS/nettrace