I have one question regarding the action in subject.
What is happening to packet when it is matched against the rule with action add src to address list. Source address of the packet is added to defined address list AND:
a) packet is sent to next rule in the SAME chain
b) packet is accepted by current chain and returned to originating chain (for user chains) or moved to next system chain (for system chains)?
IIRC the final actions are “accept”, “reject”, “drop”, and “tarpit”. All the rest continue processing (“jump” and “return” continue in the destination chain). The ip/firewall/filter wiki page is out of date on this count.
Tnx! After some testing that was my conclusion also. I thought if packet is matched it is accepted and not forwarded, but in this case it is forwarded.