These rules are built and added to chains inside special packet filtering tables of the kernelspace using a special command.

• 建立这些规则,并将其添加到内核空间的特定信息包过滤表内的链中。