table ip x { set y { type ipv4_addr limit rate 1/second counter elements = { 1.1.1.1 limit rate 1/second counter packets 0 bytes 0, 4.4.4.4 limit rate 1/second counter packets 0 bytes 0, 5.5.5.5 limit rate 1/second counter packets 0 bytes 0 } } chain y { type filter hook output priority filter; policy accept; ip daddr @y } }