Hi Quentin, Thanks for your patch: On Thu, Aug 27, 2020 at 04:42:00PM +0100, Quentin Armitage wrote: > > The dup statement requires an address, and the device is optional, > not the other way round. table netdev x { chain y { type filter hook ingress device "eth0" priority filter; policy accept; ip protocol udp dup to "eth1" } } I think probably it should be good to clarify that: - dup to 'device' - fwd to 'device' only work from the netdev family. Thanks. > Signed-off-by: Quentin Armitage <quentin@xxxxxxxxxxxxxxx> > --- > doc/statements.txt | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/doc/statements.txt b/doc/statements.txt > index 9155f286..835db087 100644 > --- a/doc/statements.txt > +++ b/doc/statements.txt > @@ -648,7 +648,7 @@ The dup statement is used to duplicate a packet and send the > copy to a different > destination. > > [verse] > -*dup to* 'device' > +*dup to* 'address' > *dup to* 'address' *device* 'device' > > .Dup statement values > -- > 2.25.4 > >