Blob Blame History Raw
table inet t {
	set s1 {
		type ipv4_addr
		flags interval
		elements = { 10.0.0.0-11.0.0.0, 172.16.0.0/16 }
	}

	set s2 {
		type ipv6_addr
		flags interval
		elements = { fe00::/64,
			     fe11::-fe22:: }
	}

	set s3 {
		type inet_proto
		flags interval
		elements = { 10-20, 50-60 }
	}

	set s4 {
		type inet_service
		flags interval
		elements = { 0-1024, 8080-8082, 10000-40000 }
	}

	chain c {
		ip saddr @s1 accept
		ip6 daddr @s2 accept
		ip protocol @s3 accept
		ip6 nexthdr @s3 accept
		tcp dport @s4 accept
	}
}