nft newbie

[gene heskett <gheskett@shentel.net>]

Greetings all;

I was just locked up by what may have been a ransomware attack by a link 
from pocket,
part of firefox's default screen. I did a power down, and had quite a 
few msg's during
the reboot about orphaned inodes but everything seems to be working ok.
I ran iptables for quite some years mostly to lock the bots out since 
some don't pay
any attention to robots.txt.

But iptables is out of support, replaced I guess with nft.
Its installed but not running ack htop,

So #1 whats the command to fire it up including at boot time?

#2, whats the command to add a drop rule when I find a bots address in 
the logs?
The man page while quite voluminus is as usual mostly bereft of useful 
examples.

Thank you nftables experts.

Cheers, Gene Heskett.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/>