> this create a new chain PVEFW-Accept (not used anymore, but could be use > for optimisation for ESTABLISHED connection) Please can you remove it. It is not used, so it does not really belong to this commit. It is very hard to find such dead code later.