#! nft -f add table filter add chain filter output { type filter hook output priority 0 ; } # set: IP addresses add rule filter output ip daddr { \ 192.168.0.1, \ 192.168.0.2, \ 192.168.0.3, \ } # set: tcp ports add rule filter output tcp dport { 22, 23 } counter