In my eyes this could break many configs / setups, as there are a lot of people that like to "archive their past configs" just like this. (Essentially just disabling config parts instead of deleting)

Imo this shouldn't affect disabled mappings, but just if there are/going to be 2 active mapping with the same IP.

@n.fort Ahh yes.. I'm sorry, thats embarassing now.. I've probably always overlooked it since it's before the "<Enter>" which I usually always expect as the first option (from other OSs aswell).. And probably because I'm used to the command being after the pipe aswell.. Still good to know now that the feature exists..

100% agree. If this isn't too big of a hassle to implement, I would very much appreciate the approach/workaround of @Apachez, until nftables supports this feature ootb...

Can also confirm this on multiple nodes with said config, running post-firewall-refactor-builds.