set firewall group dynamic-group address-group AG1
set firewall ipv4 input filter default-action accept
set firewall ipv4 input filter rule 10 action drop
set firewall ipv4 input filter rule 10 add-address-to-group destination-address address-group AG1
commit

table ip vyos_filter {
        chain VYOS_INPUT_filter {
                type filter hook input priority filter; policy accept;
                counter packets 0 bytes 0 update @DA_AG1 { ip saddr } drop comment "ipv4-INP-filter-10"
                counter packets 0 bytes 0 accept comment "INP-filter default-action accept"
        }
}