...
Firewall mangle rules consist of five predefined chains that cannot be deleted:
- The PREROUTING chain: Rules in this chain apply to packets as they just arrive on the network interface;
- The INPUT chain: Rules in this chain apply to packets just before they’re given to a local process;
- The OUTPUT chain: The rules here apply to packets just after they’ve been produced by a process;
- The FORWARD chain: The rules here apply to any packets that are routed through the current host;
- The POSTROUTING chain: The rules in this chain apply to packets as they just leave the network interface;
...