table ip w { chain y { type filter hook output priority filter; policy accept; } }