table ip myfilter { chain myinput { tcp dport {2181, 9092} accept } chain myoutput { tcp dport {2181, 9092} accept } }