#!/usr/sbin/nft -f table inet filter { chain input { # Allow DHCP server on usb* iifname "usb*" udp dport bootps accept comment "accept incoming DHCP on usb*" # Allow DHCP server on wlan* for hotspot iifname "wlan*" udp dport bootps accept comment "accept incoming DHCP on wlan*" # Allow DHCP server on p2p-wlan* for WiFi Display iifname "p2p-wlan*" udp dport bootps accept comment "accept incoming DHCP on p2p-wlan*" } }