#!/bin/bash

set -e

$NFT add table t
$NFT add chain t c1 {type filter hook output priority 0 \; }
# wrong hook output, only postrouting is valid
$NFT add rule t c1 masquerade 2>/dev/null
echo "E: accepted masquerade in output hook" >&2