iptables
Linux's classic firewall tool — rules for which packets are accepted, dropped or masqueraded.
Built on the netfilter kernel module. Successor: nftables (modern syntax). Large Docker and Kubernetes setups still use iptables under the hood. iptables -L shows current rules.