#!/bin/bash # delete flowtable by handle set -e $NFT add table inet t $NFT add flowtable inet t f { hook ingress priority filter\; devices = { lo }\; } FH=$($NFT list ruleset -a | awk '/flowtable f/ { print $NF }') $NFT delete flowtable inet t handle $FH EXPECTED="table inet t { }" GET="$($NFT list ruleset)" if [ "$EXPECTED" != "$GET" ] ; then DIFF="$(which diff)" [ -x $DIFF ] && $DIFF -u <(echo "$EXPECTED") <(echo "$GET") exit 1 fi