Hi everyone!
On a clean Fedora installation rules about ESTABLISHED and RELATED packets are placed practically at the last position in the INPUT chain. I personally think that the most packets arrived on any machine are ESTABLISHED/RELATED (the only exception is DoS attacks probably

), so why should an operating system pass a bunch of rules about --state NEW and all, when 90% or more packets are ESTABLISHED/RELATED accordingly. Correct me please if that's not right.