Licson Lee says to 電訊台 filter = 平時 firewall 嗰啲 block port 之類 nat = 改 IP header 啲野 mangle = 用黎 tag packet 嘅，tag 完可以比其他表用 tag ID 搵 packet 出黎