{#- vim: set sw=4 ts=4 sts=4 et : #}
table inet filter {
    chain {{ item }} {
        {% if trace_dropped %}nftrace set 1 {% endif %}counter reject with icmpx type host-unreachable
    }
}