xtables: initialize xtables defaults even on listing rules

Output of the tool should be the same as for iptables.

Signed-off-by: Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/iptables/nft.c b/iptables/nft.c
index e55c18c10a512c593ee46430310976e163d29c94..7e1b47bc1efaa0085e8805d0240650d4f285ead4 100644 (file)
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -2483,6 +2483,10 @@ int nft_rule_list(struct nft_handle *h, const char *chain, const char *table,
        struct nft_chain_list_iter *iter;
        struct nft_chain *c;
 
+       /* If built-in chains don't exist for this table, create them */
+       if (nft_xtables_config_load(h, XTABLES_CONFIG_DEFAULT, 0) < 0)
+               nft_chain_builtin_init(h, table, NULL, NF_ACCEPT);
+
        list = nft_chain_dump(h);
 
        iter = nft_chain_list_iter_create(list);