fw3_ipt_rule_target(r, fw3_flag_names[FW3_FLAG_ACCEPT]);
fw3_ipt_rule_append(r, "zone_%s_input", zone->name);
r = fw3_ipt_rule_new(handle);
fw3_ipt_rule_extra(r, "-m conntrack --ctstate DNAT");
fw3_ipt_rule_target(r, fw3_flag_names[FW3_FLAG_ACCEPT]);
fw3_ipt_rule_append(r, "zone_%s_input", zone->name);
r = fw3_ipt_rule_new(handle);
fw3_ipt_rule_extra(r, "-m conntrack --ctstate DNAT");