The second layer at Linux kernel firewall is If Tables and Connection Tracking. IP Tables still liao the extensibility.

• 在Linux内核防火墙的第二层是包选择子系统(IP Tables)和轨迹跟踪子系统(Connection Tracking)。