table inet hy2xs {
  chain input {
    type filter hook input priority 0; policy drop;

    iif lo accept
    ct state established,related accept
    tcp dport {{SSH_PORT}} accept
    udp dport {{HYSTERIA_PORT}} accept
    tcp dport {{UI_PORT}} ip saddr 127.0.0.1 accept
    icmp type echo-request accept
    ip6 nexthdr ipv6-icmp accept
    ip protocol icmp accept
  }
}