Final test: Server security

Read the output

After loading this ruleset, 22 and 80 are open from outside, but curl http://127.0.0.1:8080/ on the server itself stopped answering. Which line is missing?

table inet filter {
	chain input {
		type filter hook input priority filter; policy drop;
		ct state established,related accept
		tcp dport { 22, 80 } accept
	}
}

• A tcp dport 8080 accept
• B iif lo accept
• C policy accept instead of policy drop