NetFilter Mode

• NetFilter mode uses the Linux kernel to port-forward a connection using both source and destination NAT

• Quiet; No extra processes created

• Only works on Linux hosts with IP forwarding enabled.

• Adds rules to the system’s iptables policy:

• • Adds rules for the actual NAT of the connection packets
  • Adds a permanent stateful accept rule for established/related packets (if it doesn’t already exist)