Nftables

• nft --check --file workstation.heth # Syntax check nft script
• iptables-translate -A INPUT -s 89.1.1.0/24 -j DROP # Translate iptables commands into nftables (Also ip6tables-translate)
• nft list ruleset # List nft configuration
• nft list tables # List tables in nfs (Not like iptables where they are separate)
• nft list table nat # List table in nft configuration

On Ubuntu see nft configuration examples in /usr/share/doc/nftables/examples

Links

• Quick reference-nftables in 10 minutes
• mastering-linux-security - Chapter 4
• archlinux nft examples (Good)

Interesting

• https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching
• https://forge.puppet.com/modules/puppet/nftables/readme
• Python
  • https://github.com/aborrero/python-nftables-tutorial
  • https://ral-arturo.org/2020/11/22/python-nftables-tutorial.html
  • https://pypi.org/project/pyroute2.nftables/