small fixes in the save() function of the ULOG and tcp extension

diff --git a/extensions/libipt_ULOG.c b/extensions/libipt_ULOG.c
index 033e20a9406e2152384d4a428a20a0f53d1ce8a4..b27cbb9925c928659c23e69ec8a7c5e77673484b 100644 (file)
--- a/extensions/libipt_ULOG.c
+++ b/extensions/libipt_ULOG.c
@@ -141,6 +141,7 @@ static void save(const struct ipt_ip *ip,
        if (loginfo->nl_group != ULOG_DEFAULT_NLGROUP) {
                printf("--ulog-nlgroup ");
                print_groups(loginfo->nl_group);
+               printf("\n");
        }
        if (loginfo->copy_range)
                printf("--ulog-cprange %d", loginfo->copy_range);

diff --git a/extensions/libipt_tcp.c b/extensions/libipt_tcp.c
index 6d48dd730d4df7e4255b0f9de2a2e0562545c569..184b514e1d8e1222b0408f8ba8ff856d33b6cc9c 100644 (file)
--- a/extensions/libipt_tcp.c
+++ b/extensions/libipt_tcp.c
@@ -414,12 +414,13 @@ static void save(const struct ipt_ip *ip, const struct ipt_entry_match *match)
            || (tcpinfo->invflags & IPT_TCP_INV_FLAGS)) {
                if (tcpinfo->invflags & IPT_TCP_INV_FLAGS)
                        printf("! ");
-
-               print_tcpf(tcpinfo->flg_cmp);
+               printf("--tcp-flags ");
                if (tcpinfo->flg_mask != 0xFF) {
-                       printf("/");
                        print_tcpf(tcpinfo->flg_mask);
                }
+               printf(" ");
+               print_tcpf(tcpinfo->flg_cmp);
+               printf(" ");
        }
 }