table ip filter {
	chain output {
		type filter hook output priority filter; policy accept;
	}
}