We can't use dnat from the input hook,
depending on nftables (and kernel ?) version we get
"Error: Could not process rule: Operation not supported"
iptables backend also uses prerouting.
Also 'ip6 protocol tcp' is invalid, so rework / simplify the rules
Fixes 01a94e17c7
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
This document has moved to the containernetworking/cni.dev repo.
You can find it online here: https://cni.dev/plugins/current/meta/portmap/