> > Foomuuri [https://github.com/FoobarOy/foomuuri] makes it easy > > That looks interesting, but it is an entirely different language that > needs to be learned and understood. I will look into it. Where do the > rules created by Foomuuri end up? Can they be inspected by using nft > show tables? Command "nft list table inet foomuuri" (or "foomuuri list") will show them. They are also saved to /var/lib/foomuuri/ directory. You can dry-run it with "foomuuri check" and then take a look at above directory. This is probably getting bit off-topic here so we can continue in Foomuuri's github discussions.