#! nft -f add table ip filter add chain ip filter output NF_INET_LOCAL_OUT 0 # IP address add rule ip filter output ip daddr 192.168.0.1 counter # TCP ports add rule ip filter output ip protocol 6 tcp dport 22 counter