#!/bin/bash for family in ip ip6 inet do for hook in input forward output postrouting do $NFT add table $family x $NFT add chain $family x y "{ type filter hook $hook priority dstnat; }" &> /dev/null if (($? == 0)) then echo "E: dstnat should not be a valid priority name in $family $hook chains." >&2 exit 0 fi done done exit 1