The iptables.pm module was created when the NAT functionality was added. Up to this point, it is only being used to configure the firewall on the NAT host. The Linux OS modules are still used to configure iptables. With the addition of firewalld (
VCL-972) and ufw ( VCL-971), all of the Linux firewall code should be pulled out of the main OS module and into the dedicated file.