...
chain=input action=jump jump-target=someconn connection-state=new protocol=tcp in-interface=ether1 dst-port=88
chain=someconn action=add-src-to-address-list protocol=tcp address-list=somelist in-interface=ether1 dst-port=88
...
chain=input action=drop in-interface=ether1
Question 1: What happens with the packet after it finishes going through "someconn" chain?
My (probably wrong) answer: Since action "add-src-to-address-list" is not blocking type, packet will return to previous chain (input chain in this case) and continue going through until it hits default rule or chain policy. In case of RouterOS default policy of built-in chains is accept.
I'm asking because of this quote from MikroTik wiki:
Is this the same for custom chains?When processing a chain, rules are taken from the chain in the order they are listed there from top to bottom. If a packet matches the criteria of the rule, then the specified action is performed on it, and no more rules are processed in that chain (the exception is the passthrough action). If a packet has not matched any rule within the built-in chain, then it is accepted.
Question 2: Can I safely nest custom chains, assuming no loops will be involved? How deep nesting can go?
Question 3: Does it matter where set of rules of custom chain is located within the same table?