iptables subroutine chains

[David Wright <ichbin@shadlen.org>]

I am building a firewall with iptables. There are some checks I'd like to
occur on multiple chains. I'd like to arrange these as a "subroutine
chain", i.e. a chain that is called and then returns to the calling chain
if the packet makes it to the end. Schematically...

iptables -A FORWARD -j CHECKS
iptables -A INPUT -j CHECKS

iptables -A CHECKS ...
iptables -A CHECKS ...
iptables -A CHECKS -j RETURN

Yes, I know I can make it work by just reproducing the CHECKS rules in
each chain, but that's not good programming practice.


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org