tests/set


1
2
3
4
5
6
7
8
9
10
11
12
13
14

#! nft -f

add table filter
add chain filter output { hook NF_INET_LOCAL_OUT 0 ; }

# set: IP addresses
add rule filter output ip daddr { \
	192.168.0.1, \
	192.168.0.2, \
	192.168.0.3, \
}

# set: tcp ports
add rule filter output tcp dport { 22, 23 } counter