#! nft -f add table ip6 filter add chain ip6 filter output NF_INET_LOCAL_OUT 0 # IP address add rule ip6 filter output ip6 daddr 2001:6f8:974::1 counter # TCP ports add rule ip6 filter output ip6 nexthdr 6 tcp dport 22 counter