Hi Guys, What would be the nftables equivalent for this rule: iptables -D FORWARD -m conntrack --ctorigsrc 172.5.1.123 --ctproto tcp -j MARK --set-mark 123 Also how can such a rule be made for a collection of different ip-addresses in an ipset. So as an example: 172.5.1.123, 172.5.1.124, 172.5.1.125, 172.5.1.126 all these ips are part of an ipset called 'myset' How can a rule like mentioned above be applied to a collection of ips denoted by an ipset 'myset'? Thanks Amiq