On Fri, 9 Oct 2015 12:56:21 +0200 Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > On Thu, Oct 08, 2015 at 10:12:30PM +0200, Giorgio wrote: > > <cmdline>:1:37-74: Error: transport protocol mapping is only valid after > > transport protocol match > That is telling that protocol context is missing, try with this: > > nft add rule nat prerouting ip protocol tcp \ > redirect to tcp dport map { 22 : 2222, 23 : 2323 } The words, while technically correct, probably should convey more information. Perhaps something like: "... Error: You must specify a transport protocol (TCP/UDP/etc.) before you can map it" Neal -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html