On Thu, Oct 19, 2017 at 12:15:29PM +0200, Pablo Neira Ayuso wrote: > On Wed, Oct 18, 2017 at 03:56:50PM +0200, Florian Westphal wrote: > > 3. Do not permit more than one nat type per family/hook. > > Yes, this makes sense to me. You could add a singleton flag for chain, so we check this from the core, just and idea. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html