etc/xtables.conf

table raw {
	chain PREROUTING hook NF_INET_PRE_ROUTING prio -300
	chain OUTPUT hook NF_INET_LOCAL_OUT prio -300
}

table mangle {
	chain PREROUTING hook NF_INET_PRE_ROUTING prio -150
	chain INPUT hook NF_INET_LOCAL_IN prio -150
	chain FORWARD hook NF_INET_FORWARD prio -150
	chain OUTPUT hook NF_INET_LOCAL_OUT prio -150
	chain POSTROUTING hook NF_INET_POST_ROUTING prio -150
}

table filter {
	chain INPUT hook NF_INET_LOCAL_IN prio 0
	chain FORWARD hook NF_INET_FORWARD prio 0
	chain OUTPUT hook NF_INET_LOCAL_OUT prio 0
}

table nat {
	chain PREROUTING hook NF_INET_PRE_ROUTING prio -100
	chain POSTROUTING hook NF_INET_POST_ROUTING prio 100
	chain INPUT hook NF_INET_LOCAL_IN prio -100
	chain OUTPUT hook NF_INET_LOCAL_OUT prio 100
}

table security {
	chain INPUT hook NF_INET_LOCAL_IN prio 150
	chain FORWARD hook NF_INET_FORWARD prio 150
	chain OUTPUT hook NF_INET_LOCAL_OUT prio 150
}