Rules: IP Chains IP Chains organises rules into chains INPUT chain for packets arriving FORWARD chain for packets to be forwarded/masqueraded OUTPUT chain for packets being sent User chains