1 2 3 4 5 6 7
#!@sbindir@nft -f # mind the NIC, it must exists table netdev filter { chain loinput { type filter hook ingress device lo priority 0; } }