table ip x { set s { type ipv4_addr flags interval counter elements = { 192.168.2.0/24 counter packets 0 bytes 0 } } chain y { type filter hook output priority filter; policy accept; ip daddr @s } }