{
    # Activate the chain and destroy the old.
    $OUT .=<<'EOF';
    /sbin/iptables --replace local_chk 1 \
        --jump $NEW_local_chk
    /sbin/iptables --flush $OLD_local_chk
    /sbin/iptables --delete-chain $OLD_local_chk
EOF
}
