Summary

As you can see, netfilter has the capabilities to control traffic destined to, from, or through the firewall. Indeed, the capabilities extend far past basic firewalling. In later chapters we will discuss mechanisms to use iptables to implement anti-virus or intrusion detection rules inside of netfilter, creating DMZs, bridging Layer 2 capabilities, and VPN integration.