Stephen Satchell <list@xxxxxxxxxxxx> wrote: > As the documentation currently reads, you can use set expressions like this: > > tcp dport {22,8022} accept > > Is there anything in the nftables syntax that permits detecting the absence > of a match? Something like > > tcp not dport {22,8022} tcp dport != { 22, 8022 } accept