https://www.mybluelinux.com/nftables-and-geoip/