#!/usr/sbin/nft -f flush ruleset table inet filter { chain input { type filter hook input priority filter; policy accept; } chain forward { type filter hook forward priority filter; policy drop; } } table inet nat { chain redir { type nat hook prerouting priority dstnat; tcp dport 443 fib daddr type local redirect to :18089 } }