There are two sets of modules in linux netfilter framework.
One with nf prefix (e.g. nf_tables), another with xt prefix (e.g. xt_ecn).
What is the difference between two of them?
There are two sets of modules in linux netfilter framework.
One with nf prefix (e.g. nf_tables), another with xt prefix (e.g. xt_ecn).
What is the difference between two of them?
The upstream Linux kernel firewall / packet filtering project is https://www.netfilter.org and most of the core modules supplied by that project have been named (and/or renamed) to include
nf
prefix.Since the project provides among others both iptables and nftables they also use the Xtables collective name for the IPv4, IPv6, arp and eb toolsets.
That has resulted in selecting module names with the
xt
prefix.Xtables-addons contains extensions that were not, or are not yet, accepted in the main kernel/iptables packages. Those also use the
xt
prefix.