#!/bin/bash # delete flowtable by handle set -e $NFT add table inet t $NFT add flowtable inet t f { hook ingress priority filter\; devices = { lo }\; } FH=$($NFT -a list ruleset | awk '/flowtable f/ { print $NF }') $NFT delete flowtable inet t handle $FH EXPECTED="table inet t { }" GET="$($NFT list ruleset)" if [ "$EXPECTED" != "$GET" ] ; then $DIFF -u <(echo "$EXPECTED") <(echo "$GET") exit 1 fi