> This is one of my pet peeves with nft, actually. For iptables, there > was tooling like ferm which made it possible to write dual-stack rule > sets very easily. This kind of tooling seems to be completely missing > in the nftables world. Am I missing something here? Foomuuri [https://github.com/FoobarOy/foomuuri] makes it easy to write dual-stack firewall rule set in text format. Not really ferm-like, but might be what you are looking for? Full disclousure: I'm the author of Foomuuri.