1iptables-translate -A INPUT -m ttl --ttl-eq 3 -j ACCEPT 2nft add rule ip filter INPUT ip ttl 3 counter accept 3 4iptables-translate -A INPUT -m ttl --ttl-gt 5 -j ACCEPT 5nft add rule ip filter INPUT ip ttl gt 5 counter accept 6