Netfilter and iptables: Stateful firewalling for Linux

From ZDNet: “Netfilter, Linux’s in-kernel “packet mangling” infrastructure, and iptables, the administrative tool that manages it, represent a substantial improvement over ipchains, the previous option available under the 2.2 kernel.”