nftablesでローカルホストからの通信を許可する設定例

sudo nft add rule ip filter input handle 5 tcp dport 8001 accept

table ip filter { # handle 3
        chain input { # handle 1
                type filter hook input priority filter; policy accept;
                tcp dport 22 accept # handle 2
                ct state established,related accept # handle 5
                tcp dport 8001 accept # handle 9
                tcp dport 22 accept # handle 8
                drop # handle 3
        }
}