What does the conntrack module do?
What do rule match criteria do? What are they used for?
What do packet match criteria do? What are they used for?
Which utilities copy packet filtering rules to and from the kernel? How do they work?
Define a rule that will silently block incoming SMTP connections from spmr.com.
