#!/bin/bash

set -e

RULESET="table inet filter {
	set whitelist_v4 {
		type ipv4_addr;
	}

	chain prerouting {
		type filter hook prerouting priority filter;
	}
}
"

$NFT -f - <<< "$RULESET"

RULESET="table inet filter {
	chain prerouting {
		ip daddr @whitelist_v4
	}
}
"

$NFT -f - <<< "$RULESET"