Still no luck ( @th,16,16 Error: can not use variable sized data types (integer) in concat expressions add rule ipv4table k8s-filter-services ip protocol . ip daddr . @th,16,16 vmap @no-endpoints-services ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^ Error: syntax error, unexpected dport, expecting comma add rule ipv4table k8s-filter-services ip protocol . ip daddr . @th dport vmap @no-endpoints-services ^^^^^ In first case the syntax looks ok, but I am not sure if vlam type needs to be changed type inet_proto . ipv6_addr . inet_service : verdict --> type inet_proto . ipv6_addr . integer: verdict. ??? Thank you Serguei On 2019-12-18, 2:58 PM, "Laura Garcia" <nevola@xxxxxxxxx> wrote: On Wed, Dec 18, 2019 at 8:44 PM Serguei Bezverkhi (sbezverk) <sbezverk@xxxxxxxxx> wrote: > > Error: syntax error, unexpected th > > add rule ipv4table k8s-filter-services ip protocol . ip daddr . th dport vmap @no-endpoints-services > ^^ Try this: ... @th dport vmap ... or ... @th,16,16 vmap ...