{ "nftables": [ { "metainfo": { "version": "VERSION", "release_name": "RELEASE_NAME", "json_schema_version": 1 } }, { "table": { "family": "inet", "name": "filter", "handle": 0 } }, { "chain": { "family": "inet", "table": "filter", "name": "ssh_input", "handle": 0 } }, { "chain": { "family": "inet", "table": "filter", "name": "wan_input", "handle": 0 } }, { "chain": { "family": "inet", "table": "filter", "name": "prerouting", "handle": 0, "type": "filter", "hook": "prerouting", "prio": -300, "policy": "accept" } }, { "rule": { "family": "inet", "table": "filter", "chain": "wan_input", "handle": 0, "expr": [ { "vmap": { "key": { "payload": { "protocol": "tcp", "field": "dport" } }, "data": { "set": [ [ 22, { "jump": { "target": "ssh_input" } } ] ] } } } ] } }, { "rule": { "family": "inet", "table": "filter", "chain": "prerouting", "handle": 0, "expr": [ { "vmap": { "key": { "meta": { "key": "iif" } }, "data": { "set": [ [ { "elem": { "val": "lo", "counter": { "packets": 0, "bytes": 0 } } }, { "jump": { "target": "wan_input" } } ] ] } } } ] } } ] }