Re: nftables: conditionally enabling rules?

On Mon, Sep 29, 2025, at 21:53, Christoph Anton Mitterer wrote:

> Any ideas? Or is there something like conditional importing?
>
> It would be nice if one could e.g. simply say:
>   include "foo" if $var eq bar
> even better would be, if one could give include a further parameter
> that ignores non-existent files (which right now only works with
> wildcards).

Would you change the conditions and reload the rules on a frequent basis? If so, I'd suggest that you consider using vmaps and sets instead, whose contents can be changed on-the-fly without reloading the rules.