1 domain eb chain INPUT {
2 saddr 00:11:22:33:44:55 DROP;
3 among-src (00:11:22:33:44:55 00:11:22:33:44:66) DROP;
4 proto IPv4 ip-source 192.168.1.1 DROP;
5 proto IPv4 ip-proto tcp ip-dport 22 ACCEPT;
6 proto IPv6 ip6-source 2001:db8:ffff:ffff:211:22ff:fe33:4455 DROP;
7 proto ARP arp-mac-src 00:11:22:33:44:55 ACCEPT;
8 proto ARP arp-gratuitous ACCEPT;
11 interface eth0 logical-in br0 outerface eth1 logical-out br1 ACCEPT;
12 saddr Multicast daddr Broadcast DROP;