nft -f - <<__EOF table bridge filter { chain MULTICAST_OUT { # Erlaube PING # -p IPv4 --ip-proto icmp -j RETURN ether type ip meta l4proto icmp counter return # Erlaube PINGv6 # -p IPv6 --ip6-proto ipv6-icmp -j RETURN ether type ip6 meta l4proto icmpv6 counter return } } __EOF