The old rule would result in nftables failing to load if the iface doesn't exist. Using `iifname` will match on any future ifaces if they don't exist when the firewall starts.
The old rule would result in nftables failing to load if the iface doesn't exist. Using `iifname` will match on any future ifaces if they don't exist when the firewall starts.