table inet filter {
    chain input {
        type filter hook input priority 0; policy drop;
        iifname lo accept
        tcp dport 22 accept
    }
    chain forward {
        type filter hook forward pirority 0;
    }
    chain output {
        type filter hook output pirority 0;
    }
}