mark: fix invalid iptables-save output

When a neg mark is saved via iptables-save it is saved as !--mark,
but this is not recognized by iptables-restore, just adding a
space to the saved file to make it look like "! --mark" makes
iptables-restore accept the file.

Signed-off-by: Pablo Sebastian Greco <pablo@fliagreco.com.ar>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/extensions/libxt_mark.c b/extensions/libxt_mark.c
index 4ee29e71a4d17d9b31054638aa7b5b727f3209d2..811cc77eef06096a04c5a5a65cb1b7fbf7ead6da 100644 (file)
--- a/extensions/libxt_mark.c
+++ b/extensions/libxt_mark.c
@@ -125,7 +125,7 @@ static void mark_mt_save(const void *ip, const struct xt_entry_match *match)
        const struct xt_mark_mtinfo1 *info = (const void *)match->data;
 
        if (info->invert)
-               printf("!");
+               printf("! ");
 
        printf("--mark ");
        print_mark(info->mark, info->mask);