diff --git a/iptables/modules/ROOT/pages/index.adoc b/iptables/modules/ROOT/pages/index.adoc index 4608bb0..5dea1be 100644 --- a/iptables/modules/ROOT/pages/index.adoc +++ b/iptables/modules/ROOT/pages/index.adoc @@ -280,6 +280,7 @@ While built-in chains can have default policies, user-defined chains can not. ==== - If every rule in a chain that you jumped fails to provide a complete match, the packet is dropped back into the calling chain as illustrated here: + image::ROOT:table_subtraverse.jpg[chain,float=right] - If at any time a complete match is achieved for a rule with a **DROP** target, the packet is dropped and no further processing is done.