ct state
Also written: ct state established,related accept, established, related, invalid, new
An nftables match on a packet's connection-tracking state. The rule ct state established,related accept, placed first, lets every reply to an allowed connection back in.