From 2f188c852ba264028b0834632f5f813d2f8bb4c6 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Wed, 27 Nov 2019 13:58:00 +0100 Subject: nft.8: Fix nat family spec position In inet family nat statements, ip/ip6 keyword must come before 'to' keyword, not after. Fixes: fbe27464dee45 ("src: add nat support for the inet family") Cc: Florian Westphal Signed-off-by: Phil Sutter Acked-by: Pablo Neira Ayuso --- doc/statements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/statements.txt b/doc/statements.txt index e17068a8..07bf09c5 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -324,10 +324,10 @@ NAT STATEMENTS ____ *snat to* 'address' [*:*'port'] ['PRF_FLAGS'] *snat to* 'address' *-* 'address' [*:*'port' *-* 'port'] ['PRF_FLAGS'] -*snat to* { *ip* | *ip6* } 'address' *-* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] +*snat* { *ip* | *ip6* } *to* 'address' *-* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] *dnat to* 'address' [*:*'port'] ['PRF_FLAGS'] *dnat to* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] -*dnat to* { *ip* | *ip6* } 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] +*dnat* { *ip* | *ip6* } *to* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] *masquerade to* [*:*'port'] ['PRF_FLAGS'] *masquerade to* [*:*'port' *-* 'port'] ['PRF_FLAGS'] *redirect to* [*:*'port'] ['PRF_FLAGS'] -- cgit v1.2.3