nftables Rule Generator
Render a bounded shared firewall rule as review-only nftables filter-table configuration.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Avoid live production secrets; use dummy or masked data where possible. Data handling details
nftables configuration
How it works
Imports only the Firewall Rule Builder JSON model and renders one version-neutral nftables filter table and base chain. IPv4, IPv6, and address-free inet rules are supported. The configuration is display-only, creates a quickkit_filter table if applied, and has an accept policy solely to keep the generated fragment self-contained. nftables has no escape syntax inside a quoted string, so a comment or log prefix containing a double quote is rejected rather than altered, and a comment over nft's 128-byte limit (counted in UTF-8 bytes, not characters) is rejected as well. Review its interaction with your existing ruleset before any use.