Chains: Filtering INPUT Traffic that has been recieved for the local host only. FORWARD Traffic that is to be routed. Packets enter the chain after routing decisions have been made. OUTPUT Traffic that the local host is about to send. Packets enter the chain after routing decisions have been made.