#!/usr/sbin/nft -f # vim: set ts=4 sw=4: table inet filter { chain my_filter { tcp dport { http, https } accept \ comment "Accept HTTP traffic" } }