Nftables Allow Source

Use this skill to add a source IP or CIDR to nftables using the method that worked in this repo session:

• inspect the live input chain with nft -a
• insert a source allow rule at the top of the live input chain
• verify the live rule immediately
• add the same source allow rule to /etc/nftables.conf in the input chain
• reload the ruleset and verify config and live state match

Do not use a config-first workflow here. The working method is live input insertion first, persistence second.

Direct Triggers