From a1091556dbeba8d4299174e084c15bc46123e97b Mon Sep 17 00:00:00 2001
From: Joe Cooper <Joe Cooper>
Date: Mon, 2 Feb 2026 23:08:05 -0600
Subject: [PATCH] Add intro.html

---
 help/intro.html | 4 ++++
 lang/en         | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)
 create mode 100644 help/intro.html

diff --git a/help/intro.html b/help/intro.html
new file mode 100644
index 000000000..c3f054d6f
--- /dev/null
+++ b/help/intro.html
@@ -0,0 +1,4 @@
+<header>Introduction</header>
+<p>nftables stores firewall rules in tables. Each table belongs to a family (such as <tt>inet</tt>, <tt>ip</tt>, or <tt>ip6</tt>) and contains one or more chains. Chains contain rules, and each rule is a sequence of tests (matches) followed by an action like <tt>accept</tt>, <tt>drop</tt>, <tt>jump</tt>, or <tt>log</tt>. Named sets can group addresses or services for reuse in multiple rules.</p>
+<p>To get started, use the Setup page to create a default ruleset, or create a table and chain manually. Then add rules (and sets) from the table view. When you are ready to activate your changes, click Apply Configuration to load the ruleset into the kernel.</p>
+<footer>nft(8)</footer>
diff --git a/lang/en b/lang/en
index a2e57aafa..de701347f 100644
--- a/lang/en
+++ b/lang/en
@@ -68,7 +68,7 @@ setup_header=Create Default Ruleset
 setup_desc=This page allows you to create a default nftables ruleset. Select one of the options below and click 'Create'.
 setup_deny_note=Deny options will still allow SSH (port 22), Webmin (port $1), and localhost (loopback).
 setup_allow_all=Allow all traffic
-setup_deny_incoming=Deny all incoming traffic, allow all outgoing (except SSH and Webmin)
+setup_deny_incoming=Deny all incoming traffic (except SSH and Webmin), allow all outgoing
 setup_deny_all=Deny all traffic (except SSH and Webmin)
 setup_create=Create
 setup_invalid_type=Invalid ruleset type selected.