#!/usr/sbin/nft -f table inet filter { chain input { # Allow DHCP server on usb* iifname "usb*" udp dport bootps accept comment "accept incoming DHCP on usb*" } }