#!/usr/sbin/nft -f table inet filter { chain input { # drop all incoming connections on wwan iifname "wwan*" drop comment "drop all connections on wwan" } }