Oh, that explains it. Debian 10.3 comes with 4.19. Thanks, guess I have to create them separately for now. > On Mar 6, 2020, at 7:37 PM, Florian Westphal <fw@xxxxxxxxx> wrote: > > Glen Huang <heyhgl@xxxxxxxxx> wrote: >> Hi, >> >> It seems I can create a nat prerouting chain in either ip or ip6 table, but not inet, I wonder if that’s by design? > > Kernel too old? Should work as of 5.2.