table ip w { chain y { type filter hook output priority 0; policy accept; } }