table ip filter {
	ct timeout cttime {
		protocol tcp
		l3proto ip
		policy = { established : 2m3s, close : 12s }
	}

	chain c {
		ct timeout set "cttime"
	}
}