table inet filter {
	chain input2 {
		type filter hook input priority filter; policy accept;
		ip saddr 1.2.3.4 tcp dport { 22, 123, 443 } drop
	}

	chain output2 {
		type filter hook output priority filter; policy accept;
		ip daddr 1.2.3.4 tcp dport { 22, 123, 443 } drop
	}
}