table inet filter { chain ssh { type filter hook input priority 0; policy accept; tcp dport ssh accept } chain input { type filter hook input priority 1; policy accept; } }