


drop incoming packets from the Internet, which are not public IP addresses, ether1 is a public interface, log attempts with prefix "!public".jump to ICMP chain to drop unwanted ICMP messages.


drop incoming packets from the Internet, which are not public IP addresses, ether1 is a public interface, log attempts with prefix "!public".jump to ICMP chain to drop unwanted ICMP messages.