table ip filter { chain input { type filter hook input priority 0; drop } chain forward { type filter hook forward priority 0; drop } chain output { type filter hook output priority 0; drop } }