hm -- I dislike duplication.  May be there should be ```iptables-common.conf``` to be included before (see config/filter.d/sshd.conf for example) for every iptables-* action and which would define blocktype in ```[Init]```? (and move chain there too)?