1 2 3 4 5 6
#! nft -f add table ip filter add chain ip filter output { type filter hook output priority 0; } add rule ip filter output log saddr "prefix" group 0 counter