Nftables

netfilter (nftables)

nftables is the successor of iptables. The netfilter project enables packet filtering, network address [and port] translation (NA[P]T), packet logging, userspace packet queueing and other packet mangling.

monitoring netfilter

• nftwatch - https://github.com/flyingrhinonz/nftwatch