table inet filter {                                                                                                                                                                                                                                                                                                           
        chain input {
                type filter hook input priority 0; policy drop;
                ip6 nexthdr ipv6-icmp counter packets 0 bytes 0 accept
                ip protocol icmp accept
                ct state established,related accept
                iif "lo" accept                                                                                                                                                                                                                                                                                               
                tcp dport 0-65535 reject with tcp reset                                                                                                                                                                                                                                                                       
        }
}