[tor-relays] DDOS mitigation with nftables

[clearly at ivegotyour.pw]

In modern Debian, there is no more "iptabbles-nft" package.  The package 
"iptables" IS iptables-nft.  When you $ sudo apt-get install iptables, 
you will only get iptables-nft.  The optables command is a soft-link to 
it.

This is a translation layer that takes iptables rules and inserts them 
as nft rules into your netfilter tables.