Commands
command purpose
nft list ruleset print the current rules
nft -f /etc/nftables.conf load the config from file
nft monitor watch changes live
Tables and chains
inet filter input, forward, output — basic filtering
ip nat prerouting, postrouting — address translation
NAT — masquerade
The full ruleset lives in the repository; this is only what I need to look up quickly.
table ip nat {
chain postrouting {
type nat hook postrouting priority 100;
oifname "wan0" masquerade
}
}