Glossary: Hardening, Firewalls and Intrusion Detection

ct state

Also written: ct state established,related, ct state new

The nftables connection-tracking match. "established,related" lets in replies to connections already allowed (the stateful part), and "new" picks out new connections.