table ip foo {
	chain bar {
		type filter hook prerouting priority filter; policy accept;
	}
}