Hello: Now,I am studying how to setup Iptable rules,and I meet a question. I would like to know how netfilter do with a packet which is the response of a NAT-packet from the inside network? Where does netfilter do with these packets and give them original IP address? Will these packets pass through INPUT chains and go out from OUT chains?and they are changed at the local process ? I am puzzled now . Hope to know of it soon . Thanks