Hmm - something else I just noticed, with test.nft as the example - the problem only occurs with the prerouting and postrouting hooks. There is no error when using the input, forward, or output hooks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html