#!/usr/sbin/nft -f table inet filter { chain input { iifname "wwan*" udp sport 5353 drop comment "drop mDNS replies from wwan" udp sport 5353 accept comment "accept mDNS replies" } }