Firewall chains, jumps & passthrough question

RouterOS General
1

Just a quick Q about Firewall/Mangle…

A) If I use chain=prerouting action=jump jump-target=MyChain, and at the end of MyChain I have action=return, then after MyChain is processed, it will continue from next command in prerouting chain(after the jump). Like a sub-routine. Correct?

B) If I use chain=prerouting action=jump jump-target=MyChain, and at the end of that chain I have action=accept, then all further processing for the packet is stopped. Stops prerouting and MyChain all together, Correct?

C) If I have say chain=MyChain mark-packet=MyPacket passthrough=no, will all further processing for packet be stopped? Stopped in MyChain only, or in prerouting as well?

I just need to understand how/when I can stop all processing, even if I am in a sub-chain (so to speak) and how/when passthrough will stop things, and in which chains?

Even a wiki/manual link would do, I cannot seem to find one.

Thanks

Ekkas

2

An action of ‘return’ returns from the custom chain back to the calling chain, an action of ‘passthrough’ does absolutely nothing and processing continues, an action of ‘log’ logs the packet and then processing continues. Any other action executes on the packet and all further processing is stopped, unless ‘passthrough’ is set to yet, in which case processing continues.

To answer the questions explicitly:
a) correct
b) correct
c) all further processing is stopped.

3

What if at the end of custom chain there is no explicit return?

4

There’s implicit return at the end of all custom chains.