PREROUTING vs INPUT&FORWARD v iptables

[Miroslav Petricek]

Dobry den,

zajimalo by me, jaky je prakticky rozdil mezi temito dvema zapisy
v prostedi iptables:

iptables -t nat -A PREROUTING -i eth0 -s 192.168.0.0/16 -j DROP
a 
iptables -A INPUT -i eth0 -s 192.168.0.0/16 -j DROP
iptables -A FORWARD -i eth0 -s 192.168.0.0/16 -j DROP

Jsou oba zapisy ekvivalentni? 
Je vhodne pouzivat NAT tabulku pro filtrovani paketu ?

-- 
/*     Miroslav Petricek           mirek na petricek.cz
       Brno, Czech Rep.            ICQ: 56183467
---- http://www.petricek.cz/ --------------------------
    It's entirely untested, but it looks good and
        compiles. Ship it!            - Linus Torvalds               */