Linux NetFilter Hook Points

• Anywhere you can insert an iptables rule:

• Locally Originated or Destined:

• • INPUT
  • OUTPUT

• Packet Forwarding:

• • FORWARD

• DNAT, SNAT, etc:

• • PREROUTING
  • POSTROUTING