Hi, though the nft wiki is citing maps deployment at NAT prerouting level I was wondering whether maps could be effected earlier on at raw prerouting already? Like add table raw add chain raw prerouting {type filter hook prerouting priority -300;} add map raw vpn { type inet_service: ipv4_addr; } add element nat vpn { 80 : 192.168.1.100, 8888 : 192.168.1.101 } add rule raw prerouting tcp dport map @vpn -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html