If you specify an existing number when adding a rule to a chain, iptables adds the new rule before (or above) the existing rule.
如果你使用一个已经存在的整数向规则链中添加规则,新规则会自动加到那条规则的前面。
You can execute scalar rules fairly efficiently, and adding additional scalar tests or functions in a rule won't significantly impact the execution time of the rule.
可非常高效地执行标量规则,并可在规则中增加附加标量测试或者函数,而不会显著影响规则的执行时间。
That may be a generally good rule, but the problem is the world changes out from under you if you're not constantly adding to your skill set.
这也许不失为一条能让你“混”得下去的规则,但问题是世界每天都在发生变化,如果你不能持续为自己充电,你就会被这个世界淘汰。
应用推荐