table ip t {
	chain c {
		masquerade
		drop
		accept
	}
}