Hello, under https://wiki.nftables.org/wiki-nftables/index.php/Classic_perimetral_firewall_example chain global { ct state established,related accept ct state invalid drop ip protocol icmp accept ip6 nexthdr icmpv6 accept udp dport 53 accept } does not work because of : "% nft add chain [<family>] <table-name> <chain-name> { type <type> hook <hook> priority <value> \; [policy <policy>] }" * nftables & libnftnl installed via git. cheers karl -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html