table inet filter {
	set udp_accepted {
		type inet_service
		elements = { 500, 4500 }
	}

	set tcp_accepted {
		type inet_service
		elements = { 80, 443 }
	}

	chain udp_input {
		udp dport 1-128 accept
		udp dport @udp_accepted accept
		udp dport 53 accept
	}

	chain tcp_input {
		tcp dport { 1-128, 8888-9999 } accept
		tcp dport @tcp_accepted accept
		tcp dport 1024-65535 accept
	}
}