I want to drop certain packet destined to an ip_address AFTER it has reached the POSTROUTING chain. However, for iptables, the "nat" table cannot be used for filtering so the following doesn't work:
iptables -t nat -A POSTROUTING -d ip_address -j DROP
So is any way to do this? If iptables cannot do it, are there any alternatives? Please advise. Thank you.