Dear martin f krafft, Thank you for your concern.
Indeed RETURN is not required, but having it there provides additional easter-egg feature: you can see how many packets were dropped (so they didn't not reach RETURN statement) by fail2ban if you use iptables -L -v and subtracting from the numbers in INPUT chain... Since there is no harm of having it, I prefer to keep it there for now. -- .-. =------------------------------ /v\ ----------------------------= Keep in touch // \\ (yoh@|www.)onerussian.com Yaroslav Halchenko /( )\ ICQ#: 60653192 Linux User ^^-^^ [175555]
pgpPgUdem6gD0.pgp
Description: PGP signature