puppet nftables

# manage out mysql

class nftables::rules::out::mysql {

  nftables::rule {

    'default_out-mysql':

      content => 'tcp dport 3306 accept';

  }

}