INET

chains

input

forward

output

possible configs

table inet filter { chain input { type filter hook input priority 0; policy drop; iif "lo" accept ct state established,related accept ip saddr 192.168.1.0/24 accept ip6 saddr fe80::/10 accept } chain forward { type filter hook forward priority 0; policy drop; } chain output { type filter hook output priority 0; policy accept; } }