Netfilter is the Linux firewall software that replaces and improves upon the older ipchains firewall. Netfilter provides stateless and stateful packet filtering, for IPV4 and IPV6, NAT and port translation and much more. You may recognize iptables as the interface for it. If you need a custom firewall, proxy, or NAT solution this is the open source solution.