Blank Targets

"Robert M. Marmorstein" <rmmarm@xxxxxxxxx> · Sat, 7 May 2005 06:34:28 -0400 (EDT)

While testing out the graphical tool "firestarter" I noticed that it 
creates a TTL match rule with no target.  iptables -L -n I get:

Chain OUTPUT (policy DROP)
target     prot opt source               destination
DROP       all  --  0.0.0.0/0            0.0.0.0/0           state INVALID
           all  --  0.0.0.0/0            0.0.0.0/0           TTL match TTL 
== 64
ACCEPT     icmp --  192.168.1.0/24       0.0.0.0/0

There is no chain named "      ".  Is this unusual?  What happens to 
packets that match the TTL rule?

Thanks for any input!

Robert