[{
	"name": "filter",
	"family": "inet",
	"sets": [{
		"name": "blacklist4",
		"type": "ipv4_addr",
		"elements": [ "192.168.1.1", "192.168.1.2" ]
	}, {
		"name": "blacklist6",
		"type": "ipv6_addr",
		"elements": [ "feed:babe::1", "feed:babe::2" ]
	}],
	"chains": [{
		"name": "INPUT",
		"type": "filter",
		"hook": "input",
		"priority": 0,
		"policy": "drop",
		"rules": [{
			"handle": 6,
			"statements": [{
				"jump": "invalid"
			}]
		}, {
			"handle": 7,
			"statements": [{
				"match": {
					"left": {
						"type": "meta",
						"name": "iifname"
					},
					"right": {
						"type": "immediate",
						"val": "lo"
					}
				}
			}, {
				"accept": ""
			}]
		}, {
			"handle": 8,
			"statements": [{
				"match": {
					"left": {
						"type": "meta",
						"name": "iifname"
					},
					"right": {
						"type": "immediate",
						"val": "vnetbr0"
					}
				}
			}, {
				"accept": ""
			}]
		}, {
			"handle": 9,
			"statements": [{
				"jump": "wan_in"
			}]
		}, {
			"handle": 10,
			"statements": [{
				"jump": "states"
			}]
		}]
	}, {
		"name": "FORWARD",
		"type": "filter",
		"hook": "forward",
		"priority": 0,
		"policy": "drop",
		"rules": [{
			"handle": 11,
			"statements": [{
				"match": {
					"left": {
						"type": "meta",
						"name": "iifname"
					},
					"right": {
						"type": "immediate",
						"val": "vnetbr0"
					}
				}
			}, {
				"accept": ""
			}]
		}, {
			"handle": 12,
			"statements": [{
				"match": {
					"left": {
						"type": "meta",
						"name": "oifname"
					},
					"right": {
						"type": "immediate",
						"val": "vnetbr0"
					}
				}
			}, {
				"jump": "wan_in"
			}]
		}, {
			"handle": 13,
			"statements": [{
				"match": {
					"left": {
						"type": "meta",
						"name": "oifname"
					},
					"right": {
						"type": "immediate",
						"val": "vnetbr0"
					}
				}
			}, {
				"jump": "states"
			}]
		}]
	}, {
		"name": "wan_in",
		"rules": [{
			"handle": 14,
			"statements": [{
				"match": {
					"left": {
						"type": "payload",
						"name": "ip6",
						"field": "saddr"
					},
					"right": {
						"type": "immediate",
						"val": "fe80::/10"
					}
				}
			}, {
				"match": {
					"left": {
						"type": "payload",
						"name": "ip6",
						"field": "daddr"
					},
					"right": {
						"type": "immediate",
						"val": "fe80::/10"
					}
				}
			}, {
				"match": {
					"left": {
						"type": "meta",
						"name": "ct",
						"field": "state"
					},
					"right": {
						"type": "immediate",
						"val": "new"
					}
				}
			}, {
				"match": {
					"left": {
						"type": "payload",
						"name": "udp",
						"field": "sport"
					},
					"right": {
						"type": "immediate",
						"val": 547
					}
				}
			}, {
				"match": {
					"left": {
						"type": "payload",
						"name": "udp",
						"field": "dport"
					},
					"right": {
						"type": "immediate",
						"val": 546
					}
				}
			}, {
				"accept": ""
			}]
		}]
	}]
}]