iifname "lo"                                                                            counter accept; # Loopback
iifname "eth1"                                                                          counter accept; # Private network
icmp type { echo-request }                                                              counter accept;
icmpv6 type { nd-neighbor-solicit, echo-request, nd-router-advert, nd-neighbor-advert } counter accept;