Cover NAT forward owners, full port range and invalid rules

src/config_parser_doc.md

@@ -71,7 +71,7 @@ free_config(cfg);
 | `[firewall]` | `parse_firewall_rule()` | `allow=IPv4[:port]` или `allow=all`; порт 0–65535, 0 разрешает весь IP; CIDR запрещён |
 | `[control]` | `parse_control()` | `ip`, `port`, `allow` (подсеть) |
 | `[allowed_keys]` | inline | `allow_all`, `key` (64 hex) |
-| `[nat]` | `parse_nat()` | `tun_ifname`, `tun_ip`, `nat_via`, `port_start`, `port_end`, `forward` (proto:ip:in_port:ext_port) |
+| `[nat]` | `parse_nat()` | `tun_ifname`, `tun_ip`, `nat_via`, `port_start`, `port_end`, `forward` (`proto:node_id_hex:IPv4:in_port:ext_port`) |
 | `[tcp_proxy_client]` | `parse_tcp_proxy_client()` | `enabled`, `tun_name`, `tun_ip`, `mtu`, `via_node`, `socks_*`, `http_proxy_*`, `forward` (port -> ip:port) |
 | `[tcp_proxy_server]` | inline | `tcp_recv_buf` |
 | `[ntp]` | inline | `enabled`, `server`, `interval` |