nft.8: Fix nat family spec position

In inet family nat statements, ip/ip6 keyword must come before 'to'
keyword, not after.

Fixes: fbe27464dee45 ("src: add nat support for the inet family")
Cc: Florian Westphal <fw@strlen.de>
Signed-off-by: Phil Sutter <phil@nwl.cc>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/doc/statements.txt b/doc/statements.txt
index e17068a8a04be3ddfead38b5d9fc3a2c4452381e..07bf09c5e4395e527f680c15a47f9f6992f6d9d1 100644 (file)
--- a/doc/statements.txt
+++ b/doc/statements.txt
@@ -324,10 +324,10 @@ NAT STATEMENTS
 ____
 *snat to* 'address' [*:*'port'] ['PRF_FLAGS']
 *snat to* 'address' *-* 'address' [*:*'port' *-* 'port'] ['PRF_FLAGS']
-*snat to* { *ip* | *ip6* } 'address' *-* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS']
+*snat* { *ip* | *ip6* } *to* 'address' *-* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS']
 *dnat to* 'address' [*:*'port'] ['PRF_FLAGS']
 *dnat to* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS']
-*dnat to* { *ip* | *ip6* } 'address' [*:*'port' *-* 'port'] ['PR_FLAGS']
+*dnat* { *ip* | *ip6* } *to* 'address' [*:*'port' *-* 'port'] ['PR_FLAGS']
 *masquerade to* [*:*'port'] ['PRF_FLAGS']
 *masquerade to* [*:*'port' *-* 'port'] ['PRF_FLAGS']
 *redirect to* [*:*'port'] ['PRF_FLAGS']