#!/usr/sbin/nft -f
# vim: set ts=4 sw=4:
table inet filter {

    chain my_filter {
        iifname tailscale0 accept \
        comment "Accept inbount tailscale traffic"

        oifname tailscale0 accept \
        comment "Accept outbound tailscale traffic"

        udp dport { 41641 } accept \
        comment "Accept tailscale NAT traffic"
    }

}