#!/usr/sbin/nft -f
# vim: set ts=4 sw=4:
table inet filter {

    # HACK: this would not be necessary if not for the two chains being
    # incompatible
    chain my_filter {
        ip daddr 10.89.0.0/24 ct state established,related accept \
        comment "Accept incoming podman traffic"

        ip saddr 10.89.0.0/24 accept \
        comment "Accept outgoing podman traffic"
    }

}