#!/usr/sbin/nft -f table inet filter { chain input { # Allow DHCP server on usb* iifname "usb*" udp dport bootps accept comment "accept incoming DHCP on usb*" # Allow DHCP server on wlan* for hotspot iifname "wlan*" udp dport bootps accept comment "accept incoming DHCP on wlan*" } }