How to properly configure iptables with ipset?

Question

linux

Good afternoon!
I'm trying to figure out how to set up iptables. The task is as follows: a certain IP address of the network should be given access to / from a certain set of IP addresses recorded in one of the ipset sets, and packets to / from other IP addresses should be dropped.
Wrote the following rules:

iptables -I FORWARD 1 -s 192.168.1.35 -m set --match-set MYSET src,dst -j ACCEPT
iptables -I FORWARD 2 -d 192.168.1.35 -m set --match-set MYSET src,dst -j ACCEPT
iptables -I FORWARD 3 -s 192.168.1.35 -j DROP
iptables -I FORWARD 4 -d 192.168.1.35 -j DROP

The result is that all packets from the device are dropped, as if the first two rules do not exist.
Set MYSET is created correctly, checked (ipset -L MYSET).

Answer 1

Try
iptables -I FORWARD 1 -s 192.168.1.35 -m set --match-set MYSET dst -j ACCEPT
iptables -I FORWARD 2 -d 192.168.1.35 -m set --match-set MYSET src -j ACCEPT

Answer 2

iptables -I FORWARD 1 -m state --state RELATED,ESTABLISHED -m comment --comment "РАЗРЕШЕНО Установленные соединения" -j ACCEPT
iptables -I FORWARD 2 -s 192.168.1.35 -m set --match-set MYSET dst -m comment --comment "РАЗРЕШЕНО Доступ по списку MYSET" -j ACCEPT
iptables -P FORWARD DROP