table inet firewall { chain to_switchs { # meta iif $admin_if accept drop } chain from_switchs { # meta oif $admin_if accept drop } }