---

sudo nft add rule ip filter input iifname "enp9s0" udp dport 53 accept
sudo nft add rule ip filter input iifname "enp9s0" tcp dport 53 accept
sudo systemctl restart dnsmasq