ѽ҉ᶬḳ℠ <vtol@xxxxxxx> wrote: > It should work then but somehow does not, any way to figure out what is > going wrong then? I would rather prefer not having to return to IPT. Works for me on 5.6.18: table inet nat { chain prerouting { type nat hook prerouting priority -100; policy accept; } chain input { type nat hook input priority 100; policy accept; } chain output { type nat hook output priority -100; policy accept; } chain postrouting { type nat hook postrouting priority 100; policy accept; } } load with nft -f. If it doesn't work, try 'table ip nat' or 'table ip6 nat'.