nftables

nft add table inet country_filter

nft 'add chain inet country_filter input { type filter hook input priority 0; policy accept; }

nft add rule inet country_filter input ip saddr 74.7.0.0/16 drop

nft list table inet country_filter

nft add rule inet country_filter input ip saddr 74.0.0.0/8 counter drop

nft add rule inet country_filter input ip saddr 168.0.0.1-168.0.0.20 drop

nft add rule inet country_filter input ip saddr 168.0.0.1-168.0.0.20 counter drop

 백업