#! nft -f add table ip6 filter add chain ip6 filter output { type filter hook output priority 0 ; } # IP address add rule ip6 filter output ip6 daddr 2001:6f8:974::1 counter # Next protocol add rule ip6 filter output ip6 nexthdr tcp # TCP ports add rule ip6 filter output tcp dport 22 counter