table ip t { set t { type ipv4_addr elements = { 1.1.1.1 } } chain c { ct state new tcp dport { 22222 } ip saddr @t drop jump other } chain other { } }