{
    $OUT .=<<'EOF';
    OLD_local_chk=$(get_safe_id local_chk filter find)
    NEW_local_chk=$(get_safe_id local_chk filter new)
    /sbin/iptables --new-chain $NEW_local_chk
    /sbin/iptables -A $NEW_local_chk --in-interface lo -j ACCEPT
EOF
}
