{
    $OUT .=<<'EOF';
    OLD_ForwardedTCP=$(get_safe_id ForwardedTCP filter find)
    NEW_ForwardedTCP=$(get_safe_id ForwardedTCP filter new)
    /sbin/iptables --new-chain $NEW_ForwardedTCP
EOF
}
