[OPTIONS] enable: 1 [RULES] IN ACCEPT -source non-existing-alias -dport 443 IN ACCEPT -source +non-existing-ipset -dport 443 IN ACCEPT -p tcp -dport 80