First appeared somewhere in the middle of the 2.1.x series, replacing ipfwadm. Deprecated in Linux 2.4 in favor of NAT, however there is an ipchains compatibility module.