On Fri, Mar 10, 2023 at 07:26:43PM +0100, Pablo Neira Ayuso wrote: > 8c75d3a16960 ("Reject invalid chain priority values in user space") > provides error reporting from the evaluation phase. Instead, this patch > infers the error after the kernel reports EOPNOTSUPP. > > test.nft:3:28-40: Error: Chains of type "nat" must have a priority value above -200 > type nat hook prerouting priority -300; > ^^^^^^^^^^^^^ > > This patch also adds another common issue for users compiling their own > kernels if they forget to enable CONFIG_NFT_NAT in their .config file. > > Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Acked-by: Phil Sutter <phil@xxxxxx>