table ip t { chain c { type filter hook output priority 0; policy accept; ip daddr { 192.168.0.1, 192.168.0.2, 192.168.0.3 } tcp dport { ssh, telnet } counter packets 0 bytes 0 } }