to be accurate, Netfilter is the internal name of the Linux subsystem that plays
around with packets.
ipchains and iptables are specific implementations of Netfilter. They also just
happen to be the names of the programs that edit Netfilter rules as well.
--
thing.