Shorewall creating a complex ruleset?

[aphenitry]

Hello,

I've been using regular iptables since the good ol' ipchains days, and now I wanted to try shorewall instead of configuring it myself.
With the same ruleset, running iptables -L |wc -l gave 40 for my approach, and about 130 for the same thing using shorewall. Does it just do a lot of stuff I don't know about (and if so, what? I have basically followed this except I have even fewer rules) or what? To me it seems it just creates an awful lot of chains for no reason (I'm guessing this is since they aren't used in my config yet). Still having 14 chains allowing anything from anywhere to anywhere seems rather pointless.

I'm sure this is very insignificant as far as performance is concerned, however I prefer keeping things as simple as possible (why would I be on Gentoo if I didn't? )

Suggestions?

Thanks!

[magic919]

Suggestions?

Build it by hand, naturally

[aphenitry]