iptables-translate -A INPUT -m pkttype --pkt-type broadcast -j DROP nft add rule ip filter INPUT pkttype broadcast counter drop iptables-translate -A INPUT -m pkttype ! --pkt-type unicast -j DROP nft add rule ip filter INPUT pkttype != unicast counter drop iptables-translate -A INPUT -m pkttype --pkt-type multicast -j ACCEPT nft add rule ip filter INPUT pkttype multicast counter accept