table ip x { flowtable y { hook ingress priority filter devices = { "lo" } } chain x { flow add @y } }