Question about iptable's comments

Leroy Tennison <[email protected]> Fri, 23 Oct 2020 23:56:20 +0000
Newsgroups org.kernel.vger.lartc
Message-ID <QB1PR01MB3875BFA823FBB46858A09C0FCD1A0@QB1PR01MB3875.CANPRD01.PROD.OUTLOOK.COM>
I have used rules along the lines of

iptables -A INPUT -s 10.0.0.0/8  -m comment --comment "Comment up to 256 characters" -j ACCEPT

with success, now I'm wondering if I can extend that to something like

iptables -A INPUT -m comment --comment "Comment up to 256 characters" 

for situations where comments longer that 256 characters are needed to adequately document a situation.  For example

iptables -A INPUT -m comment --comment "The below rule covers a complex situation where multiple systems on the same subnet require access on the given ports but IP addresses for systems on that subnet change over time, the purposes for the access are:"
iptables -A INPUT -m comment --comment "(first purpose described)"
iptables -A INPUT -m comment --comment "(second purpose described)"
.
.
iptables -A INPUT -m comment --comment "(last purpose described)"
iptables -A INPUT (actual rule specification)

I realize this may have some impact on processing efficiency because each of the above is an entry in a chain, the question I have is "If I do this, will it break anything?"
Leroy Tennison
Network Information/Cyber Security Specialist
E: [email protected]
P:
2220 Bush Dr
McKinney, Texas
75070
www.datavoiceint.com
This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc.If you prefer not to be contacted by Harris Operating Group please notify us.This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message.