add bridge filter table definitions

Signed-off-by: Patrick McHardy <kaber@trash.net>

diff --git a/files/nftables/bridge-filter b/files/nftables/bridge-filter
new file mode 100644 (file)
index 0000000..ca306d4
--- /dev/null
+++ b/files/nftables/bridge-filter
@@ -0,0 +1,7 @@
+#! nft -f
+
+table bridge filter {
+       chain input             { hook NF_INET_LOCAL_IN         -200; }
+       chain forward           { hook NF_INET_FORWARD          -200; }
+       chain output            { hook NF_INET_LOCAL_OUT        200; }
+}