#!/usr/sbin/nft -f
table inet filter {
	chain input {
		iifname "usb*" accept comment "Allow incoming network traffic from USB"
	}
	chain forward {
		iifname "usb*" accept comment "Allow outgoing network traffic from USB"
		ct state {established, related} counter accept comment "accept established connections"
	}
}

