From 3c633296b49670f44cf448aeb854cfb18167c256 Mon Sep 17 00:00:00 2001 From: Louis Sautier Date: Sun, 10 Sep 2017 02:39:51 +0200 Subject: xtables-compat-restore: fix translation of mangle's OUTPUT This chain should be translated as a route chain, not as a filter chain. Signed-off-by: Pablo Neira Ayuso --- iptables/xtables-translate.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'iptables') diff --git a/iptables/xtables-translate.c b/iptables/xtables-translate.c index 3e6c7051..4f6a9caf 100644 --- a/iptables/xtables-translate.c +++ b/iptables/xtables-translate.c @@ -357,6 +357,8 @@ static int xlate_chain_set(struct nft_handle *h, const char *table, if (strcmp(table, "nat") == 0) type = "nat"; + else if (strcmp(table, "mangle") == 0 && strcmp(chain, "OUTPUT") == 0) + type = "route"; printf("add chain %s %s %s { type %s ", family2str[h->family], table, chain, type); -- cgit v1.2.3