Netfilter

• nf_conntrack subsystem

• • General framework for connection tracking
  • • for stateful filtering and NAT
  • Superseded ip_conntrack for IPv4

• ip_tables / ip6_tables abstraction layer (x_tables)

• Extension module API (for IPv4 and IPv6)

• • Got easier to add new IPv6 matches / targets
  • More 14 modules newly supports IPv6 (1.4.0)