{
r = fw3_ipt_rule_new(handle);
fw3_ipt_rule_extra(r, "-m conntrack --ctstate DNAT");
+ fw3_ipt_rule_comment(r, "Accept port redirections");
fw3_ipt_rule_target(r, fw3_flag_names[FW3_FLAG_ACCEPT]);
fw3_ipt_rule_append(r, "zone_%s_input", zone->name);
r = fw3_ipt_rule_new(handle);
fw3_ipt_rule_extra(r, "-m conntrack --ctstate DNAT");
+ fw3_ipt_rule_comment(r, "Accept port forwards");
fw3_ipt_rule_target(r, fw3_flag_names[FW3_FLAG_ACCEPT]);
fw3_ipt_rule_append(r, "zone_%s_forward", zone->name);
}