1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
#!/bin/bash set -e EXPECTED="table ip x { set s { type ipv4_addr flags interval counter elements = { 192.168.2.0/24 } } chain y { type filter hook output priority filter; policy accept; ip daddr @s } }" $NFT -f - <<< "$EXPECTED"