1iptables-translate -A INPUT -p tcp -i eth0 --sport 53 -j ACCEPT 2nft 'add rule ip filter INPUT iifname "eth0" tcp sport 53 counter accept' 3 4iptables-translate -A OUTPUT -p tcp -o eth0 --dport 53:66 -j DROP 5nft 'add rule ip filter OUTPUT oifname "eth0" tcp dport 53-66 counter drop' 6 7iptables-translate -I OUTPUT -p tcp -d 8.8.8.8 -j ACCEPT 8nft 'insert rule ip filter OUTPUT ip protocol tcp ip daddr 8.8.8.8 counter accept' 9 10iptables-translate -I OUTPUT -p tcp --dport 1020:1023 --sport 53 -j ACCEPT 11nft 'insert rule ip filter OUTPUT tcp sport 53 tcp dport 1020-1023 counter accept' 12 13iptables -A INPUT -p tcp --tcp-flags ACK,FIN FIN -j DROP 14nft 'add rule ip filter INPUT tcp flags fin / fin,ack counter drop' 15 16iptables-translate -A INPUT -p tcp --syn -j ACCEPT 17nft 'add rule ip filter INPUT tcp flags syn / fin,syn,rst,ack counter accept' 18 19iptables-translate -A INPUT -p tcp --syn --dport 80 -j ACCEPT 20nft 'add rule ip filter INPUT tcp dport 80 tcp flags syn / fin,syn,rst,ack counter accept' 21 22iptables-translate -A INPUT -f -p tcp 23nft 'add rule ip filter INPUT ip frag-off & 0x1fff != 0 ip protocol tcp counter' 24 25iptables-translate -A INPUT ! -f -p tcp --dport 22 26nft 'add rule ip filter INPUT ip frag-off & 0x1fff 0 tcp dport 22 counter' 27 28iptables-translate -A INPUT -p tcp --tcp-option 23 29nft 'add rule ip filter INPUT tcp option 23 exists counter' 30 31iptables-translate -A INPUT -p tcp ! --tcp-option 23 32nft 'add rule ip filter INPUT tcp option 23 missing counter' 33