инструмент администрирования для фильтрации пакетов IPv4 / IPv6 и NAT (administration tool for IPv4/IPv6 packet filtering and NAT)
MATCH AND TARGET EXTENSIONS
iptables can use extended packet matching and target modules. A
list of these is available in the iptables-extensions(8) manpage.