Note that iptables can do it as well