#!/bin/bash RULESET='add table ip filter add chain ip filter filter { type filter hook prerouting priority mangle; policy accept; } add ct helper ip filter ftp { type "ftp" protocol tcp; }; add rule ip filter filter tcp dport 33 ct helper set "ftp"' set -e $NFT -f - <<< "$RULESET" RULESET='flush chain ip filter filter delete chain filter filter delete ct helper ip filter ftp' $NFT -f - <<< "$RULESET"