# Warning: table ip nat is managed by iptables-nft, do not touch! table ip nat { chain DOCKER_OUTPUT { meta l4proto tcp ip daddr 127.0.0.11 xt match "tcp" counter packets 0 bytes 0 xt target "DNAT" meta l4proto udp ip daddr 127.0.0.11 xt match "udp" counter packets 329 bytes 20249 xt target "DNAT" } chain OUTPUT { type nat hook output priority dstnat; policy accept; ip daddr 127.0.0.11 counter packets 329 bytes 20249 jump DOCKER_OUTPUT } chain DOCKER_POSTROUTING { meta l4proto tcp ip saddr 127.0.0.11 xt match "tcp" counter packets 0 bytes 0 xt target "SNAT" meta l4proto udp ip saddr 127.0.0.11 xt match "udp" counter packets 0 bytes 0 xt target "SNAT" } chain POSTROUTING { type nat hook postrouting priority srcnat; policy accept; ip daddr 127.0.0.11 counter packets 329 bytes 20249 jump DOCKER_POSTROUTING } } / #