1iptables-translate -A INPUT -m connlabel --label 40 2nft add rule ip filter INPUT ct label 40 counter 3 4iptables-translate -A INPUT -m connlabel ! --label 40 --set 5nft add rule ip filter INPUT ct label set 40 ct label and 40 != 40 counter 6