nftabler,nftablesdoc: stringify numerical dstnat prio

When nftablesdoc tests dump the state of nftables, the argument '-y' /
'--numeric-priority' isn't used, so all priorities should be
stringified. However, there's a bug in older versions of nftables that
prevents the stringification of the 'dstnat' priority — it's currently
dumped as '-100'.

New versions fix that, and thus running these tests on Debian 13 fails
because of this discrepancy with golden files.

So, look for 'type nat hook output priority -100' and stringify the
priority to ensure compatibility across versions of nft.

Signed-off-by: Albin Kerouanton <albinker@gmail.com>

daemon/libnetwork/drivers/bridge/internal/nftabler/nftabler_test.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 	"net"
 	"net/netip"
+	"strings"
 	"testing"
 
 	"github.com/moby/moby/v2/daemon/libnetwork/drivers/bridge/internal/firewaller"
@@ -99,8 +100,9 @@ func testNftabler(t *testing.T, tn string, config firewaller.Config, netConfig f
 			assert.Assert(t, is.Contains(res.Combined(), "No such file or directory"))
 			return
 		}
+		out := strings.ReplaceAll(res.Combined(), "type nat hook output priority -100", "type nat hook output priority dstnat")
 		assert.Assert(t, res.Error)
-		golden.Assert(t, res.Combined(), name+"__"+family+".golden")
+		golden.Assert(t, out, name+"__"+family+".golden")
 	}
 
 	makePB := func(hip string, cip netip.Addr) types.PortBinding {

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false,wsl2mirrored=true__ip.golden

@@ -22,7 +22,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip.golden

@@ -22,7 +22,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=false__ip6.golden

@@ -22,7 +22,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true,wsl2mirrored=true__ip.golden

@@ -22,7 +22,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip.golden

@@ -22,7 +22,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/cleaned,hairpin=true__ip6.golden

@@ -22,7 +22,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=false,snat=true,gwm=routed,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=false,gwm=routed,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=nat-unprotected,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=false,masq=true,snat=true,gwm=routed,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=nat-unprotected,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=false,gwm=routed,bindlh=true__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false,wsl2mirrored=true__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip.golden

@@ -26,7 +26,7 @@ table ip docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip daddr != 127.0.0.0/8 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}
 

daemon/libnetwork/drivers/bridge/internal/nftabler/testdata/TestNftabler/hairpin=false,internal=false,icc=true,masq=false,snat=true,gwm=nat,bindlh=false__ip6.golden

@@ -26,7 +26,7 @@ table ip6 docker-bridges {
 	}
 
 	chain nat-OUTPUT {
-		type nat hook output priority -100; policy accept;
+		type nat hook output priority dstnat; policy accept;
 		ip6 daddr != ::1 fib daddr type local counter packets 0 bytes 0 jump nat-prerouting-and-output
 	}