
chain INPUT {
	dport http ACCEPT
	}
