The second layer is IP Tables and Connection Tracking models. IP Tables still has the extensibility.

• 在Linux内核防火墙的第二层足包选择子系统(IP Tables)和轨迹跟踪予系统(Connection Tracking)。