table ip t { chain c { accept drop accept } }