table ip x { flags dormant chain y { type nat hook prerouting priority filter; policy accept; } }