table ip t { chain c1 { type filter hook output priority filter; policy accept; } }