table ip ipfilter {
	chain routing {
		type filter hook forward priority filter; policy accept;
		icmp type echo-request iif { "enp0s3", "enp0s8" } drop
		icmp type { echo-reply, echo-request } accept
		drop
	}

	chain system_in {
		type filter hook input priority filter; policy accept;
		icmp type echo-request iif { "enp0s3", "enp0s8" } drop
	}
}