iifname "lo" counter accept; # Loopback
iifname "eth1" counter accept; # Private network
icmp type { echo-request } counter accept;
icmpv6 type { nd-neighbor-solicit, echo-request, nd-router-advert, nd-neighbor-advert } counter accept;