Embedded Linux Primer

While troubleshooting why I couldn't get a new subnet through my NAT server, I came across these great diagrams by Jan Engelhardt. Sure helps see the 'big' picture!!

Netfilter Components
Netfilter Packet Flow

Some other useful links:

Netfilter.org Docs page