nft

Allows configuration of tables, chains and rules provided by the Linux kernel firewall. Nftables replaces iptables. More information: https://wiki.nftables.org/wiki-nftables/index.php/Main_Page.

sudo nft list ruleset

sudo nft add table inet filter

sudo nft add chain inet filter input \{ type filter hook input priority 0 \; policy accept \}

sudo nft add rule inet filter input tcp dport \{ telnet, ssh, http, https \} accept

sudo nft add rule nat postrouting ip saddr 192.168.0.0/24 masquerade

sudo nft --handle --numeric list chain family table chain

sudo nft delete rule inet filter input handle 3

sudo nft list ruleset > /etc/nftables.conf