table inet x { set GEOIP_CC_wan-lan_120 { type ipv4_addr flags interval elements = { 1.32.128.0/18, 1.32.200.0-1.32.204.128, 1.32.207.0/24, 1.32.216.118-1.32.216.255, 1.32.219.0-1.32.222.255, 1.32.226.0/23, 1.32.231.0/24, 1.32.233.0/24, 1.32.238.0/23, 1.32.240.0/24, 223.223.220.0/22, 223.255.254.0/24 } } chain y { ip saddr 1.2.3.4 tcp dport 80 meta mark set 0x0000000a accept ip saddr 1.2.3.4 tcp dport 81 meta mark set 0x0000000b accept ip saddr . tcp dport { 1.2.3.5 . 81, 1.2.3.5 . 82 } accept } }