table inet filter {
    chain input {
        type filter hook input priority 0; policy drop;

        iif "lo" accept
        iif "eth0"

        ct state established,related accept

        tcp dport 22 accept

        tcp dport 8000 accept  
        icmp type echo-request accept
        icmpv6 type echo-request accept

       
    }

    chain forward {
        type filter hook forward priority 0; policy drop;
        masquerade
    }

    chain output {
        type filter hook output priority 0; policy accept;
    }
}