On 10/11/2018 07:23 PM, ad^2 wrote: > nft insert rule ip myfw postrouting tcp dport 80 counter nftrace set 1 accept > nft insert rule ip myfw prerouting tcp dport 80 counter nftrace set 1 accept. > "accept" is a terminating verdict. Subsequent rules will not be processed. Without the "accept" at the end of the rule, you should get the expected behavior. -- ___ | | / E-Mail: linux@xxxxxxxxxxxxxxxxx |horsten |/\nabe WWW: http://linux.thorsten-knabe.de