Host access control

Insert rule manually

 nft insert rule inet filter cPanel-HostAccessControl tcp dport 22 ip saddr 192.168.1.70 counter accept;

Save rules

nft list ruleset > /etc/sysconfig/nftables.conf

Add entire network

nft insert rule inet filter cPanel-HostAccessControl tcp dport 22 ip saddr {192.168.1.0/24} counter accept;

Add multiple IP's at once

nft insert rule inet filter cPanel-HostAccessControl tcp dport 22 ip saddr {192.168.1.190, 192.168.1.216, 192.168.1.195} counter accept;

list chain

nft list chain inet filter cPanel-HostAccessControl

deleting nft rules¶

rules can be deleted only by handle numbers
Getting the handle numbers can be done with the -a flag
```
nft -a list ruleset
```

or for a specific chain

nft -a list chain inet filter cPanel-HostAccessControl

Deleting the rule from range of handle numbers

for rule in {102..246}; do nft delete rule inet filter cPanel-HostAccessControl handle $rule;done

List chain
```
nft list chain inet filter INPUT
```

Drop connection from IP range.

nft insert rule inet filter INPUT ip saddr 81.30.0.0/16 counter drop;

Results from the above 2

nft list chain inet filter INPUT
table inet filter {
        chain INPUT {
                type filter hook input priority filter; policy accept;
                ip saddr 81.30.0.0/16 counter packets 9 bytes 540 drop
                counter packets 5418555 bytes 4603005116 jump cPanel-HostAccessControl
                counter packets 5351413 bytes 4594896893 jump cP-Firewall-1-INPUT
                counter packets 4619458 bytes 4550297507 jump cPanel-HostAccessControl
                counter packets 4619374 bytes 4550281028 jump cP-Firewall-1-INPUT
        }
}