#!/usr/sbin/nft -f table inet filter { chain input { # allow mosh udp dport 60000-60010 accept comment "accept mosh" } }