On Sat, Dec 18, 2021 at 09:14:15PM +0100, Florian Westphal wrote: > reg is populated based off the payload base: > > NFTNL_EXPR_META_KEY = NFTNL_EXPR_BASE, > NFTNL_EXPR_META_DREG, > NFTNL_EXPR_PAYLOAD_DREG = NFTNL_EXPR_BASE, > > Fix this. It worked because the simple nft rules > currently generated via ipables-nft have > base == register-number but this is a coincidence. s/correc/correct/ other than that, LGTM, thanks