#! nft -f add table bridge filter add chain bridge filter output { type filter hook output priority 0 ; } # LL protocol add rule bridge filter output eth type 0x0800 counter # IP address add rule bridge filter output eth type 0x0800 ip daddr 20.0.0.2 counter # IPv6 address add rule bridge filter output eth type 0x86DD ip6 daddr 2001:6f8:974:3::2 counter