Nftables.d snippet rule not inserted

[efahl]

Oops, original post completely misread your post, here's a complete rewrite:

Some chains do not have %includes in them, reject_to_wan is one of them.

More details than you ever wanted...

Nftables snippets chain option is not taken into account

Hi everyone! After migrating from fw3 to fw4, I need to add custom log filters so they can be parsed by my ELK stack easily. To do so, I've read this doc and I realized that not all chain are taken into account (or I misread the doc). For example, I'd like to customize the drop_from_wan to log dropped packets coming from my WAN: ... config include option type 'nftables' option path '/etc/test.nft' option position 'chain-post' option chain 'drop_from_wan' Running fw4 does not show any…