ip saddr 172.24.0.0/24 oifname "eth0" counter accept;
iifname "eth0" ip daddr 172.24.0.0/24 counter accept;