Netfilter

Netfilter
Initial release26 August 1999; 25 years ago (1999-08-26) (Linux 2.3.15)
Stable release
6.11.6[1] Edit this on Wikidata / 1 November 2024; 1 day ago (1 November 2024)
Written inC
Operating systemLinux
Type
LicenseGNU GPL
Websitenetfilter.org

Netfilter is a framework provided by the Linux kernel that allows various networking-related operations to be implemented in the form of customized handlers. Netfilter offers various functions and operations for packet filtering, network address translation, and port translation, which provide the functionality required for directing packets through a network and prohibiting packets from reaching sensitive locations within a network.

Netfilter represents a set of hooks inside the Linux kernel, allowing specific kernel modules to register callback functions with the kernel's networking stack. Those functions, usually applied to the traffic in the form of filtering and modification rules, are called for every packet that traverses the respective hook within the networking stack.[2]

  1. ^ Greg Kroah-Hartman (1 November 2024). "Linux 6.11.6". Retrieved 1 November 2024.
  2. ^ "netfilter/iptables project homepage - The netfilter.org project". netfilter.org. Retrieved 2014-07-04.