1iptables-translate -A INPUT -m connlabel --label 40 2nft 'add rule ip filter INPUT ct label 40 counter' 3 4iptables-translate -A INPUT -m connlabel ! --label 40 --set 5nft 'add rule ip filter INPUT ct label set 40 ct label and 40 != 40 counter' 6