1:PREROUTING 2*nat 3-j DNAT --to-destination dead::beef;=;OK 4-j DNAT --to-destination dead::beef-dead::fee7;=;OK 5-j DNAT --to-destination [dead::beef]:1025-65535;;FAIL 6-j DNAT --to-destination [dead::beef] --to-destination [dead::fee7];;FAIL 7-p tcp -j DNAT --to-destination [dead::beef]:1025-65535;=;OK 8-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1025-65535;=;OK 9-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1025-65536;;FAIL 10-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1025-65535 --to-destination [dead::beef-dead::fee8]:1025-65535;;FAIL 11-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1000-2000/1000;=;OK 12-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1000-2000/3000;=;OK 13-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1000-2000/65535;=;OK 14-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1000-2000/0;;FAIL 15-p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1000-2000/65536;;FAIL 16-p tcp -j DNAT --to-destination [dead::beef]:ssh;-p tcp -j DNAT --to-destination [dead::beef]:22;OK 17-p tcp -j DNAT --to-destination [dead::beef]:ftp-data;-p tcp -j DNAT --to-destination [dead::beef]:20;OK 18-p tcp -j DNAT --to-destination [dead::beef]:echo-ssh;;FAIL 19-p tcp -j DNAT --to-destination [dead::beef]:10-20/ftp;-p tcp -j DNAT --to-destination [dead::beef]:10-20/21;OK 20-j DNAT;;FAIL 21