nftables syntax peculiarities

nftables has some peculiarities in its syntax. One of my 'favorites' is the fact that you can't define an empty set while using elements keyword and contents literal. For example, let's create a table: nft add table test_tbl Now we can add a set: nft add set test_tbl test_set { type inet_service\; } This set is empty - that works just fine. We could also initialize it with some values from the get…