>Does an ACCEPT or DROP target as a _policy_ behave in a >non-terminating way where in a rule they are terminating? Or maybe, >"terminating" only means no more rules in the current built-in chain >get considered, rather than no more rules in _any_ chain? DROP target means packet is dropped and no other chains are traversed. ACCEPT means that no more rules in the current built-in chain get considered but traversal of next built-in chain occurs. regards, Marek Kierdelewicz -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html