Iptables is built on top of netfilter: the new packet alteration framework for Linux 2.4. It is an enhancement on ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects.
1eaa9c5ee21455918fad19ee71cf9de7079abaac0e8f4807bf9f6223d6458b43