{ "nftables": [ { "metainfo": { "version": "VERSION", "release_name": "RELEASE_NAME", "json_schema_version": 1 } }, { "table": { "family": "ip", "name": "t", "handle": 0 } }, { "chain": { "family": "ip", "table": "t", "name": "c", "handle": 0 } }, { "chain": { "family": "ip", "table": "t", "name": "other", "handle": 0 } }, { "set": { "family": "ip", "name": "t", "table": "t", "type": "ipv4_addr", "handle": 0, "elem": [ "1.1.1.1" ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "in", "left": { "ct": { "key": "state" } }, "right": "new" } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "tcp", "field": "dport" } }, "right": { "set": [ 22222, 33333 ] } } } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "match": { "op": "==", "left": { "payload": { "protocol": "ip", "field": "saddr" } }, "right": "@t" } }, { "drop": null } ] } }, { "rule": { "family": "ip", "table": "t", "chain": "c", "handle": 0, "expr": [ { "jump": { "target": "other" } } ] } } ] }