chain test BF_HOOK_XDP ACCEPT
rule tcp.flags not rst DROP
