diff --git a/docs/GETTING-STARTED-nftables.md b/docs/GETTING-STARTED-nftables.md
index 5a5d46d0..10e8d536 100644
--- a/docs/GETTING-STARTED-nftables.md
+++ b/docs/GETTING-STARTED-nftables.md
@@ -74,6 +74,12 @@
     table inet filter {
         chain input {
             type filter hook input priority 0; policy drop;
+  
+            # Ensure local traffic is accepted still
+            iif lo accept
+            # Allow established connections (e.g. responses to outgoing traffic)
+            ct state { established, related } accept
+            # Allow incoming SSH connections
             tcp dport 22 accept
         }
         chain forward {