diff --git a/rule.go b/rule.go
index a450182..7818e5d 100644
--- a/rule.go
+++ b/rule.go
@@ -192,6 +192,10 @@ func exprsFromMsg(b []byte) ([]expr.Any, error) {
 						e = &expr.Immediate{}
 					case "bitwise":
 						e = &expr.Bitwise{}
+					case "redir":
+						e = &expr.Redir{}
+					case "nat":
+						e = &expr.NAT{}
 					}
 					if e == nil {
 						// TODO: introduce an opaque expression type so that users know