{

$OUT .=<<"HERE";

# Forward to (from the local network or the internet to the wireless clients)
forwardToChilli()\{
    /sbin/iptables -N FORWARD_TO_CHILLI
    /sbin/iptables -A FORWARD_TO_CHILLI -j state_chk
    /sbin/iptables -A FORWARD_TO_CHILLI -p icmp --icmp-type destination-unreachable -j ACCEPT
    /sbin/iptables -A FORWARD_TO_CHILLI -j denylog
\}
HERE

}
