babel-tester/firewall/restrict-http.conf

#!/usr/sbin/nft -f

flush ruleset

table inet filter {
    chain input {
      type filter hook input priority 0;
    }
    chain forward {
        type filter hook forward priority 0; policy accept
        ip6 saddr fd00:42::/32 dport { 80 } reject;
        ip6 daddr fd00:42::/32 dport { 80 } reject;
        accept
    }
    chain output {
        type filter hook output priority 0;
    }
}