> It's mainly to not add a rule twice,mainly in bridge chains or other parent chains. > But never in a tap chain. OK, but where do you remove stale tap chains? (if someone removes a network device from the VM)