nftables

Show current ruleset: nft list ruleset

Diagrams for Netfilter packet traversal: http://linux-ip.net/pages/diagrams.html#netfilter-kernel-packet-traversal