#!/bin/bash
set -e
RULESET="table ip x {
chain y {
ct state invalid drop
ct state established,related accept
}
chain z {
tcp dport { 1 } accept
tcp dport 2-3 drop
tcp dport 4 accept
}
chain w {
ip saddr 1.1.1.1 counter accept
ip saddr 1.1.1.2 counter drop
}
}"
$NFT -o -f - <<< $RULESET