1iptables-translate -A FORWARD -m helper --helper sip 2nft add rule ip filter FORWARD ct helper \"sip\" counter 3 4iptables-translate -A FORWARD -m helper ! --helper ftp 5nft add rule ip filter FORWARD ct helper != \"ftp\" counter 6