iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT
nft 'add rule ip filter FORWARD tcp dport 22 counter reject'

iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT --reject-with icmp-net-unreachable
nft 'add rule ip filter FORWARD tcp dport 22 counter reject with icmp type net-unreachable'

iptables-translate -A FORWARD -p TCP --dport 22 -j REJECT --reject-with tcp-reset
nft 'add rule ip filter FORWARD tcp dport 22 counter reject with tcp reset'