table ip filter { map forwport { type ipv4_addr . inet_proto . inet_service : verdict flags interval counter elements = { 10.133.89.138 . tcp . 8081 counter packets 0 bytes 0 : accept } } chain FORWARD { type filter hook forward priority filter; policy drop; iifname "enp0s8" ip daddr . ip protocol . th dport vmap @forwport counter packets 0 bytes 0 } }