#!/bin/bash
set -e
RULESET="table ip x {
set y {
type ipv4_addr
counter
elements = { 1.1.1.1, * }
}
set z {
type ipv4_addr
flags interval
counter
elements = { 1.1.1.0/24 , * }
}
}"
$NFT -f - <<< $RULESET
$NFT delete element x y { \* }
$NFT add element x y { \* }