Netfilter
From DikapediaV2
netfilter - iptables, ufw and pf are all wrappers for netfilter, the network filtering module that provides Pre/Post routing, Input/Output, and packets forwarding. You can block packets using the filter table to route packets to other machines using the NAT table and turn the instance into a router.