#!/bin/bash set -e EXPECTED="table ip x { set s { type ipv4_addr flags interval counter elements = { 192.168.2.0/24 } } chain y { type filter hook output priority filter; policy accept; ip daddr @s } }" $NFT -f - <<< "$EXPECTED"