table ip t { chain c { type filter hook input priority -30; policy accept; } }