Dear martin f krafft, Thank you for your concern.
Indeed RETURN is not required, but having it there provides additional
easter-egg feature: you can see how many packets were dropped (so they
didn't not reach RETURN statement) by
fail2ban if you use iptables -L -v and subtracting from the numbers in
INPUT chain...
Since there is no harm of having it, I prefer to keep it there for now.
--
.-.
=------------------------------ /v\ ----------------------------=
Keep in touch // \\ (yoh@|www.)onerussian.com
Yaroslav Halchenko /( )\ ICQ#: 60653192
Linux User ^^-^^ [175555]
pgpPgUdem6gD0.pgp
Description: PGP signature

