1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
#!/sbin/nft -f flush ruleset table inet named_counter_demo { flowtable flowed { hook ingress priority filter devices = { lo } } chain forward { type filter hook forward priority filter; policy accept; ct state established flow add @flowed } }