Michael S.:
With iptables/netfilter, user-defined chains are *essential* for many firewall implementation details. There are some things you cannot do without using user-defined chains (e.g. a logical AND for certain types of traffic). Get used to it.
OK. But, why put everything into a U-D chain? I figure that the geek thing would be to have them for only that which needs it.
Robert:
Note that the RH-Firewall-1-INPUT chain is called from two places. Think about it.
Not on mine: Chain RH-Firewall-1-INPUT (1 references)
