- Separate hooked chains with explicit defaults and isolated chains - Use labels for priorities according to https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks#Priority_within_hook - Add minecraft port - Add admin blackhole for subnet rejection