nft list table inet firewall table inet firewall { chain smtp-chain { counter packets 1 bytes 80 } chain incoming { type filter hook input priority 0; policy accept; iif "lo" accept ct state established,related accept tcp dport ssh ct state new accept tcp dport https ct state new accept tcp dport smtp ct state new jump smtp-chain drop } }