test_nft.py

test_nft.py

#!/usr/bin/python3

# Needs following to be run first:
# nft -f /usr/share/nftables/ipv4-filter.nft

data = {
    "nftables": [
        {"metainfo": {"json_schema_version": 1}},
        {
            "add": {
                "rule": {
                    "family": "ip",
                    "table": "filter",
                    "chain": "input",
                    "expr": [
                        {
                            "match": {
                                "op": "==",
                                "left": {
                                    "payload": {"protocol": "udp", "field": "dport"}
                                },
                                "right": 50000,
                            }
                        }
                    ],
                }
            }
        },
    ]
}

import nftables

n = nftables.Nftables()
n.set_handle_output(True)
n.set_echo_output(True)
print(n.json_cmd(data))