ip saddr 0.0.0.0/24 ip daddr 10.10.10.0/24 accept
ct state vmap { established : accept, related : accept, invalid : drop }
chain forward {
type filter hook forward priority filter; policy accep;
}
chain forward {
type filter hook forward priority filter; policy accept;
}