Antonio Ojea <antonio.ojea.garcia@xxxxxxxxx> wrote: > l4proto . th dport map @hostport-map-v6 > Error: transport protocol mapping is only valid after transport protocol match > add rule inet cni-kindnet prerouting dnat ip6 to ip6 daddr . meta > l4proto . th dport map @hostport-map-v6 > ~~~~ > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Looks like a bug, fixed in nft 1.1.1