iptables-translate -A INPUT -m pkttype --pkt-type broadcast -j DROP nft 'add rule ip filter INPUT pkttype broadcast counter drop' iptables-translate -A INPUT -m pkttype ! --pkt-type unicast -j DROP nft 'add rule ip filter INPUT pkttype != unicast counter drop' iptables-translate -A INPUT -m pkttype --pkt-type multicast -j ACCEPT nft 'add rule ip filter INPUT pkttype multicast counter accept'