On Tue, Oct 16, 2018 at 04:52:05PM +0200, Paolo Abeni wrote: > The commit 2eb0f624b709 ("netfilter: add NAT support for shifted > portmap ranges") did not set the checkentry/destroy callbacks for > the newly added DNAT target. As a result, rulesets using only > such nat targets are not effective, as the relevant conntrack hooks > are not enabled. > The above affect also nft_compat rulesets. > Fix the issue adding the missing initializers. Applied, thanks Paolo.