flush ruleset table inet filter { chain input { type filter hook input priority 0; policy drop; ct state established,related accept iifname "lo" accept icmp type echo-request accept } chain forward { type filter hook forward priority 0; policy drop; } chain output { type filter hook output priority 0; policy accept; } }