Hi Thx a lot, that worked. I expected the add cmd to produce an error since the chain already exists, but seems to work fine. Andreas Hoefler On Thu, Aug 13, 2020 at 12:28:34PM +0000, Andreas Hoefler wrote: > Hi > > I have a chain with default policy drop. > I would like to first have the default policy set to accept, then add rules and later change it to drop. > Is this possible? For the record: nft add chain x y { policy accept\; } Assuming an existing basechain 'y'. The backlash (\) before the semicolon is there in case of invoking this from bash.