#!/usr/sbin/nft -f flush ruleset table inet filter { chain input { type filter hook input priority 0; } chain forward { type filter hook forward priority 0; policy accept tcp dport { 80 } reject; accept } chain output { type filter hook output priority 0; } }