Summary Packets destined for the local machine go in via the INPUT chain Packets destined for some other machine go through the FORWARD chain Packets generated on the local machine go out via the OUTPUT chain