table ip t { chain input { type filter hook input priority filter + 4; policy accept; jump c1 } chain c1 { } }