In inet family nat statements, ip/ip6 keyword must come before 'to' keyword, not after. Fixes: fbe27464dee45 ("src: add nat support for the inet family") Cc: Florian Westphal <fw@xxxxxxxxx> Signed-off-by: Phil Sutter <phil@xxxxxx> --- doc/statements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/statements.txt b/doc/statements.txt index e17068a8a04be..07bf09c5e4395 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -324,10 +324,10 @@ NAT STATEMENTS ____ *snat to* 'address' [*:*'port'] ['PRF_FLAGS'] *snat to* 'address' *-* 'address' [*:*'port' *-* 'port'] ['PRF_FLAGS'] -*snat to* { *ip* | *ip6* } 'address' *-* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] +*snat* { *ip* | *ip6* } *to* 'address' *-* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] *dnat to* 'address' [*:*'port'] ['PRF_FLAGS'] *dnat to* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] -*dnat to* { *ip* | *ip6* } 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] +*dnat* { *ip* | *ip6* } *to* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS'] *masquerade to* [*:*'port'] ['PRF_FLAGS'] *masquerade to* [*:*'port' *-* 'port'] ['PRF_FLAGS'] *redirect to* [*:*'port'] ['PRF_FLAGS'] -- 2.24.0