table inet filter { set ip-block-4-test { type ipv4_addr flags interval auto-merge elements = { 1.1.1.1 } } chain input { type filter hook input priority filter; policy drop; tcp dport { 22, 80, 443 } ct state new counter packets 0 bytes 0 accept } }