libxt_NFQUEUE: fix --queue-bypass ipt-save output

else, this will print "--queue-num 0--queue-bypass ".

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/extensions/libxt_NFQUEUE.c b/extensions/libxt_NFQUEUE.c
index e47b586c8175900033c50dd7601be6da120c3b7f..8c2f69998005c76ec58980bdd81d8bc52cb48879 100644 (file)
--- a/extensions/libxt_NFQUEUE.c
+++ b/extensions/libxt_NFQUEUE.c
@@ -152,7 +152,7 @@ static void NFQUEUE_save_v2(const void *ip, const struct xt_entry_target *target
        NFQUEUE_save_v1(ip, target);
 
        if (info->bypass)
-               printf("--queue-bypass ");
+               printf(" --queue-bypass");
 }
 
 static void NFQUEUE_init_v1(struct xt_entry_target *t)

diff --git a/tests/options-most.rules b/tests/options-most.rules
index ae28b82d8069e544edda8b4ebce0b574d40e5e06..757336152cca2eafac8a71bdcd8f34ef8e0ab9bf 100644 (file)
--- a/tests/options-most.rules
+++ b/tests/options-most.rules
@@ -178,6 +178,8 @@
 -A ntarg
 -A ntarg -j NFQUEUE --queue-balance 8:99
 -A ntarg
+-A ntarg -j NFQUEUE --queue-num 0 --queue-bypass
+-A ntarg
 -A ntarg -j RATEEST --rateest-name RE1 --rateest-interval 250.0ms --rateest-ewmalog 500.0ms
 -A ntarg
 -A ntarg -j RATEEST --rateest-name RE2 --rateest-interval 250.0ms --rateest-ewmalog 500.0ms