Vorlage:Input-output.conf

flush ruleset
table inet filter {
        chain input {
                 type filter hook input priority filter; policy drop;
                ct state established,related accept
                ct state new iif "lo" accept
               ct state new iif "enp0s8" ip saddr 10.88.213.0/24 tcp dport 22 accept
	     	ct state new iif "enp0s9" ip saddr 172.26.213.0/24 tcp dport 22 accept
	  	ct state new iif "enp0s10" ip saddr 10.213.1.0/24 tcp dport 22 accept
	 	ct state new iif "enp0s3" ip saddr 192.168.6.200 tcp dport 22 accept
                ct state new icmp type echo-request accept 
                log prefix " --nftables-drop-input-- "
        }

     

        chain output {
                type filter hook output priority filter; policy drop;
                ct state established,related accept
                ct state new oif "lo" accept
                ct state new accept
               log prefix " --nftables-drop-output-- "
        }
}