iptables
E255518
IPv6 firewall configuration utility
Linux firewall configuration utility
network address translation configuration tool
userspace packet filter configuration tool
iptables is a widely used Linux userspace utility for configuring the kernel’s packet filtering and network address translation (NAT) firewall rules.
All labels observed (5)
| Label | Occurrences |
|---|---|
| iptables canonical | 4 |
| ip6tables | 1 |
| ip6tables-restore | 1 |
| ipchains | 1 |
| iptables-restore | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T2313712 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: iptables Context triple: [Harald Welte, notableWork, iptables]
-
A.
ips
ips is an IETF working group focused on developing standards for transporting storage protocols over IP networks.
-
B.
ICMP
ICMP (Internet Control Message Protocol) is a core network-layer protocol used primarily for sending error messages and operational information, such as in tools like ping and traceroute, within IP networks.
-
C.
Windows Firewall
Windows Firewall is a built-in network security component of the Windows operating system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
-
D.
IKEv2
IKEv2 is a modern key management and security association protocol used to establish and maintain secure VPN connections in IPsec-based networks.
-
E.
IPsec
IPsec is a suite of protocols that provides secure, encrypted communication over IP networks by authenticating and protecting the integrity and confidentiality of data packets.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: iptables Target entity description: iptables is a widely used Linux userspace utility for configuring the kernel’s packet filtering and network address translation (NAT) firewall rules.
-
A.
ips
ips is an IETF working group focused on developing standards for transporting storage protocols over IP networks.
-
B.
ICMP
ICMP (Internet Control Message Protocol) is a core network-layer protocol used primarily for sending error messages and operational information, such as in tools like ping and traceroute, within IP networks.
-
C.
Windows Firewall
Windows Firewall is a built-in network security component of the Windows operating system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
-
D.
IKEv2
IKEv2 is a modern key management and security association protocol used to establish and maintain secure VPN connections in IPsec-based networks.
-
E.
IPsec
IPsec is a suite of protocols that provides secure, encrypted communication over IP networks by authenticating and protecting the integrity and confidentiality of data packets.
- F. None of above. chosen
Statements (69)
| Predicate | Object |
|---|---|
| instanceOf |
IPv6 firewall configuration utility
ⓘ
Linux firewall configuration utility ⓘ network address translation configuration tool ⓘ userspace packet filter configuration tool ⓘ |
| configurationMethod | command-line interface ⓘ |
| configures |
Linux kernel NAT subsystem
ⓘ
linked to:
netfilter
Linux kernel packet filtering ⓘ |
| controls | kernel space packet filtering tables ⓘ |
| developedFor |
Linux operating system
ⓘ
linked to:
GNU/Linux
|
| hasComponent |
ip6tables
ⓘ
ip6tables-restore ⓘ
linked to:
iptables
ip6tables-save ⓘ iptables-restore ⓘ
linked to:
iptables
iptables-save ⓘ |
| implements |
network address translation
ⓘ
packet filtering rules ⓘ stateful firewalling ⓘ |
| introducedIn | Linux 2.4 kernel era ⓘ |
| license | GNU General Public License ⓘ |
| maintainedBy |
netfilter project
ⓘ
linked to:
netfilter
|
| operatesIn | userspace ⓘ |
| packageNameOnDebian | iptables ⓘ |
| packageNameOnRedHat | iptables ⓘ |
| predecessor | ipchains ⓘ |
| replacedBy | nftables ⓘ |
| supportsChain |
FORWARD
ⓘ
INPUT ⓘ OUTPUT ⓘ POSTROUTING ⓘ PREROUTING ⓘ |
| supportsLogging | packet logging via LOG target ⓘ |
| supportsMatch |
conntrack
ⓘ
icmp ⓘ iprange ⓘ limit ⓘ mac ⓘ multiport ⓘ owner ⓘ recent ⓘ state ⓘ tcp ⓘ udp ⓘ |
| supportsProtocolFamily | IPv4 ⓘ |
| supportsStateTracking | connection tracking ⓘ |
| supportsTable |
filter
ⓘ
mangle ⓘ nat ⓘ raw ⓘ security ⓘ |
| supportsTarget |
ACCEPT
ⓘ
DNAT ⓘ DROP ⓘ LOG ⓘ MARK ⓘ MASQUERADE ⓘ REDIRECT ⓘ REJECT ⓘ SNAT ⓘ |
| typicalLocation | /sbin/iptables ⓘ |
| usedFor |
host-based firewalling
ⓘ
port forwarding ⓘ router firewalling ⓘ traffic filtering by IP address ⓘ traffic filtering by interface ⓘ traffic filtering by port ⓘ traffic filtering by protocol ⓘ |
| usesFramework |
netfilter
ⓘ
netfilter ⓘ |
| writtenInLanguage | C ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: iptables Description of subject: iptables is a widely used Linux userspace utility for configuring the kernel’s packet filtering and network address translation (NAT) firewall rules.
Referenced by (8)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: iptables
linked to: iptables
linked to: iptables