▁reached ; ▁travers al ▁either ▁continues ▁in ▁the ▁parent ▁chain ▁( as ▁if ▁RET URN ▁was ▁used ), ▁or ▁the ▁base ▁chain ▁policy , ▁which ▁is ▁an ▁ult imate ▁fate , ▁is ▁used . ▁ ▁Target s ▁also ▁return ▁a ▁ver dict ▁like ▁A CCE PT ▁( N AT ▁modules ▁will ▁do ▁this ) ▁or ▁D ROP ▁( e . g . ▁the ▁RE JECT ▁module ), ▁but ▁may ▁also ▁imply ▁CON T IN UE ▁( e . g . ▁the ▁LOG ▁module ; ▁CON T IN UE ▁is ▁an ▁internal ▁name ) ▁to ▁continue ▁with ▁the ▁next ▁rule ▁as ▁if ▁no ▁target / ver dict ▁was ▁specified ▁at ▁all . ▁ ▁Users pace ▁util ities ▁ ▁Front - ends ▁There ▁are ▁numerous ▁third - party ▁software ▁applications ▁for ▁i pt ables ▁that ▁try ▁to ▁facil itate ▁setting ▁up ▁rules . ▁Front - ends ▁in ▁text ual ▁or ▁graph ical ▁fashion ▁allow ▁users ▁to ▁click - generate ▁simple ▁rules ets ; ▁scripts ▁usually ▁refer ▁to ▁shell ▁scripts ▁( but ▁other ▁script ing ▁languages ▁are ▁possible ▁too ) ▁that ▁call ▁i pt ables ▁or ▁( the ▁faster ) ▁i pt ables - rest ore ▁with ▁a ▁set ▁of ▁pre defined ▁rules , ▁or ▁rules ▁expanded ▁from ▁a ▁template ▁with ▁the ▁help ▁of ▁a ▁simple ▁configuration ▁file . ▁Linux ▁distributions ▁commonly ▁employ ▁the ▁latter ▁scheme ▁of ▁using ▁templates . ▁Such ▁a ▁template - based ▁approach ▁is ▁pract ically ▁a ▁limited ▁form ▁of ▁a ▁rule ▁generator , ▁and ▁such ▁gener ators ▁also ▁exist ▁in ▁stand alone