1 2 3 4 5
table ip x { chain y { ct state vmap { invalid : drop, established : accept, related : accept } } }