Is the part of the kernel that consists of packet filtering tables containing sets of rules that are used by the kernel to control the process of packet filtering.

• 是内核的一部分,由一些信息包过滤表组成,这些表包含内核用来控制信息包过滤处理的规则集。