I added ctnetlink support to a SIP proxy (siproxd) yesterday and stumbled over some problems with NAT. The CTA_NAT attribute only allows to set up a single manip, since NAT mappings can't be changed for existing conntracks there is no way to add both a src- and a dst-manip. This patch removes the overloading of the status bits with netlink-relevant semantic and changes the CTA_NAT attribute to CTA_NAT_SRC and CTA_NAT_DST. It breaks compatiblity, but I don't think its worth trying to keep it for this stupid behaviour. Any comments?