table ip t { set t { type ipv4_addr elements = { 1.1.1.1 } } chain c { ct state new tcp dport 22222 ip saddr @t drop jump other } chain other { } }