fix nftables

nftables.conf

@@ -47,8 +47,8 @@ table inet filter {
 		# ICMP/ICMPv6: 2º maior volume medido no host, avaliado cedo
 		# de propósito (dados reais: ~66k pacotes/dia, ficava por
 		# último na versão antiga em iptables).
-		ip protocol icmp jump icmpv4
-		meta l4proto ipv6-icmp jump icmpv6
+		ip protocol icmp jump icmpv4_in
+		meta l4proto icmpv6 jump icmpv6_in
 
 		# Pacotes TCP malformados / scanners óbvios
 		tcp flags & (fin|syn|rst|psh|ack|urg) == (fin|syn|rst|psh|ack|urg) \
@@ -93,22 +93,22 @@ table inet filter {
 		ct state established,related accept
 		iifname "tun0" accept
 		iifname "wg0" accept
-		tcp daddr 10.15.0.45 dport { 80, 443 } accept
-		tcp ip6 daddr 2001:db8:15::45 dport { 80, 443 } accept
+		ip daddr 10.15.0.45 tcp dport { 80, 443 } accept
+		ip6 daddr 2001:db8:15::45 tcp dport { 80, 443 } accept
 	}
 
 	chain output {
 		type filter hook output priority filter; policy accept;
 	}
 
-	chain icmpv4 {
+	chain icmpv4_in {
 		icmp type echo-reply accept
 		icmp type echo-request limit rate 1/second burst 3 packets accept
 		icmp type echo-request drop
 		drop
 	}
 
-	chain icmpv6 {
+	chain icmpv6_in {
 		icmpv6 type destination-unreachable accept
 		icmpv6 type packet-too-big limit rate 5/minute accept
 		icmpv6 type time-exceeded limit rate 5/minute accept