Kernel-level Internet packet filter subsystem for the 2.4 and higher version of the Linux kernel; Rules can be enabled to allow or deny network connections to the system.