to be accurate, Netfilter is the internal name of the Linux subsystem that plays around with packets.
ipchains and iptables are specific implementations of Netfilter. They also just happen to be the names of the programs that edit Netfilter rules as well. -- thing.
