chain firewall BF_HOOK_XDP DROP
rule ip4.saddr eq 127.0.0.1 ACCEPT
rule tcp.dport eq 22 counter ACCEPT
rule tcp.dport eq 80 ACCEPT
rule tcp.dport eq 443 ACCEPT
rule icmp.type eq 8 ACCEPT
