search for: sophtist

...ng) mechanisms, and both can throw away packets, but they differ in what other actions they can do: Netfilter can redirect, reply to, and modify packets, but it cannot delay or reorder them. Its throttling features (limit and hashlimit match modules) are fairly simplistic. It does, however, have sophtisticated stateful packet classification features. Netfilter also lets you mess with packets in multiple different places in the routing path. There''s PREROUTING and POSTROUTING, and every packet also passes through one of INPUT, OUTPUT, and FORWARD. tc is all about throttling and reorderin...