nft Command - Manage Netfilter Firewall Rules

The nft command is used to set up, maintain, and inspect packet filtering and classification rules in the Linux kernel. It is the modern replacement for iptables.

Syntax

nft [options] [commands]

Examples

nft list ruleset

nft add table inet filter

nft add chain inet filter input { type filter hook input priority 0 ; }

Notes

• nft is intended to replace the older iptables, ip6tables, arptables, and ebtables tools.
• Requires root privileges to modify firewall rules.
• Configuration can be saved and restored using nft list ruleset > rules.nft and nft -f rules.nft.