#!/bin/bash set -e RULESET="flush ruleset table ip x { map m { typeof ct bytes : meta priority flags interval elements = { 0-2048000 : 1:0001, 2048001-4000000 : 1:0002, } } chain y { type filter hook output priority 0; policy accept; meta priority set ct bytes map @m } }" $NFT -f - <<< $RULESET $NFT delete element ip x m { 0-2048000 } $NFT add element ip x m { 0-2048000 : 1:0002 } $NFT delete element ip x m { 0-2048000 : 1:0002 }