Netfilter: On Top of Netfilter

Currently, four major subsystems exist on top of netfilter:
1. The backwards-compatibility ipchains & ipfwadm +masq/redir modules.
2. The `iptables' packet filtering system.
3. The connection-tracking system.
4. The NAT system.