Hi, Out of curiosity, is there a reason why calling a chain "trace" results in an error? This configuration: chain trace { type filter hook prerouting priority -301; ip daddr 24.153.88.9 ip protocol icmp meta nftrace set 1 } Results in the following error when I try loading the ruleset: /etc/firewall/rules.nft:40:9-13: Error: syntax error, unexpected trace, expecting string chain trace { ^^^^^ Calling the chain anything else doesn't give this error. Is 'trace' some sort of reserved keyword? I thought chains could be called anything. Can they not? This is on nftables 0.9.8. Thanks, -Martin