---

nft_group_rules:
  - { version: "ip6", from: [ '2001:470:7f95::/48' ], port: "1883" }

group_nft_input:
  - ip saddr @trusted4 tcp dport { 1883 } accept
  - ip6 saddr @trusted6 tcp dport { 1883 } accept