Nefilter configuration in my environment is managed via Ansible. This page is a quick reference for command line usage and other tips.

# show active netfilter rules
nft list ruleset

You can easily validate your rules using nmap:

# testing DHCP service is accessible
sudo nmap --script broadcast-dhcp-discover