#!/usr/sbin/nft -f table inet filter { chain input { iifname "waydroid0" accept comment "Allow incoming network traffic from WayDroid" } chain forward { iifname "waydroid0" accept comment "Allow outgoing network traffic from WayDroid" ct state {established, related} counter accept comment "accept established connections" } }