table inet filter {
	chain input {
		tcp dport 22 accept comment "accept SSH"
	}
}