nft add rule inet filter input ct state established,related accept

Lets replies and related packets, like FTP data channels, through for connections your system already opened. The ct keyword reads connection tracking state, a concept iptables expresses as conntrack --ctstate. Place this rule early so response traffic is not dropped by later rules.