How packet filter works

If I setup a packet filter, will the filter be working at linux kernel level (iptables) or will it just stop the traffic at TMM level?

 

Does anyone know?