#!/bin/bash set -e $NFT add table t $NFT add chain t input {type filter hook input priority 4 \; } $NFT add chain t c1 $NFT add rule t input jump c1 # kernel should return EOPNOTSUPP $NFT add rule t c1 masquerade 2>/dev/null >&2