Permitir el tráfico DNS usando Nftables

Permitir el tráfico DNS usando Nftables

Probé los siguientes comandos pero todavía no permite el tráfico DNS. ¿Qué estoy haciendo mal?

nft add table inet tarffic
nft add chain inet traffic INPUT '{ type filter hook input priority 100; policy drop; }'
nft add rule inet traffic INPUT ip protocol icmp accept
nft add rule inet traffic INPUT ct state established,related accept
nft add rule inet traffic INPUT udp dport 53 accept
nft add rule inet traffic INPUT tcp dport 53 accept

nft add chain inet traffic OUTPUT '{ type filter hook output priority 100; policy drop; }'
nft add rule inet traffic OUTPUT ip protocol icmp accept
nft add rule inet traffic OUTPUT ct state established,related accept
nft add rule inet traffic OUTPUT udp dport 53 accept
nft add rule inet traffic OUTPUT tcp dport 53 accept

información relacionada