diff --git a/board/alix/ROOTFS b/board/alix/ROOTFS
index c890213..69afa00 100644
--- a/board/alix/ROOTFS
+++ b/board/alix/ROOTFS
@@ -27,3 +27,4 @@ iana-etc
 btrfs-progs
 dosfstools
 openssh
+nftables
diff --git a/board/rpi3/ROOTFS b/board/rpi3/ROOTFS
index 490dec9..5e364ea 100644
--- a/board/rpi3/ROOTFS
+++ b/board/rpi3/ROOTFS
@@ -31,3 +31,4 @@ btrfs-progs
 dosfstools
 kbd
 openssh
+nftables
diff --git a/pkg/nftables/build b/pkg/nftables/build
new file mode 100644
index 0000000..87edb51
--- /dev/null
+++ b/pkg/nftables/build
@@ -0,0 +1,29 @@
+VERSION="0.8.2"
+SRCDIR="nftables-${VERSION}"
+TARBALL="${SRCDIR}.tar.bz2"
+URL="https://netfilter.org/projects/nftables/files"
+SHA256SUM="675f0aaf88f11e7eacef63dc89cb65d207d9e09c3ea6d518f0ebbb013f0767ec"
+DEPENDS="libmnl libnftnl gmp readline ncurses"
+
+prepare() {
+	return
+}
+
+build() {
+	local INPUT="$1"
+	local OUTPUT="$2"
+
+	$INPUT/configure --prefix="" --host="$TARGET" --sbindir=/bin \
+			 --disable-debug --disable-man-doc --without-mini-gmp
+
+	make -j $NUMJOBS
+}
+
+deploy() {
+	local SOURCE="$1"
+	local BUILD="$2"
+	local DEPLOY="$3"
+	local DEVDEPLOY="$4"
+
+	make DESTDIR="$DEPLOY" install-strip
+}