test 0 0 0 filter filter
0 1 NF_INET_LOCAL_IN accept ip