diff options
| author | Louis Sautier <sautier.louis@gmail.com> | 2017-09-10 02:39:51 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-09-10 22:04:18 +0200 |
| commit | 3c633296b49670f44cf448aeb854cfb18167c256 (patch) | |
| tree | 084035a56c25fb0d90ac560c3389163ae761e157 /iptables | |
| parent | 1c32e5606fdf53856cba0cd9bc7b3f8b584b2cc2 (diff) | |
xtables-compat-restore: fix translation of mangle's OUTPUT
This chain should be translated as a route chain, not as a filter chain.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables')
| -rw-r--r-- | iptables/xtables-translate.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/iptables/xtables-translate.c b/iptables/xtables-translate.c index 3e6c7051..4f6a9caf 100644 --- a/iptables/xtables-translate.c +++ b/iptables/xtables-translate.c @@ -357,6 +357,8 @@ static int xlate_chain_set(struct nft_handle *h, const char *table, if (strcmp(table, "nat") == 0) type = "nat"; + else if (strcmp(table, "mangle") == 0 && strcmp(chain, "OUTPUT") == 0) + type = "route"; printf("add chain %s %s %s { type %s ", family2str[h->family], table, chain, type); |