Also: nft add rule nat ip saddr {10.0.0.0/8, 192.168.0.0/16} tcp dport {http, ht...

aexaey on Oct 29, 2016 | parent | context | favorite | on: Nftables – A new packet classification framework

Also:

  nft add rule nat ip saddr {10.0.0.0/8, 192.168.0.0/16} tcp dport {http, https} dnat 1.2.3.4

vs.

  iptables -t nat -A PREROUTING -m tcp -p tcp -s 10.0.0.0/8 --match multiport --dports 80,443 -j DNAT --to 1.2.3.4
  iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.0.0/16 --match multiport --dports 80,443 -j DNAT --to 1.2.3.4

petre on Oct 29, 2016 [–]

I wonder if the nft rules are order sensitive, because iptables arguments shouldn't be.