1iptables-translate -A INPUT -p 51 -m ah --ahspi 500 -j DROP 2nft 'add rule ip filter INPUT ah spi 500 counter drop' 3 4iptables-translate -A INPUT -p 51 -m ah --ahspi 500:600 -j DROP 5nft 'add rule ip filter INPUT ah spi 500-600 counter drop' 6 7iptables-translate -A INPUT -p 51 -m ah ! --ahspi 50 -j DROP 8nft 'add rule ip filter INPUT ah spi != 50 counter drop' 9 10iptables-translate -A INPUT -p 51 -m ah --ahspi 0:4294967295 -j DROP 11nft 'add rule ip filter INPUT meta l4proto ah counter drop' 12 13iptables-translate -A INPUT -p 51 -m ah ! --ahspi 0:4294967295 -j DROP 14nft 'add rule ip filter INPUT ah spi != 0-4294967295 counter drop' 15