#!/sbin/nft -f flush ruleset table ip myfilter { chain myinput { type filter hook input priority 0; policy accept; #policy accept ct state established accept } chain myoutput { type filter hook output priority 0; policy accept; #policy accept ct state established accept } chain forward { type filter hook forward priority 0; policy accept; #policy accept ct state established accept } }