fix the match-loading at protocol specification time (Sven Koch)

diff --git a/iptables.c b/iptables.c
index fe131cf46669e04333b6c636195f95bc13ebf4f3..f838356cd08835a93e05eac381c9e97904b9a768 100644 (file)
--- a/iptables.c
+++ b/iptables.c
@@ -2030,6 +2030,9 @@ int do_command(int argc, char *argv[], char **table, iptc_handle_t *handle)
                                        strcpy(m->m->u.user.name, m->name);
                                        m->init(m->m, &fw.nfcache);
 
+                                       opts = merge_options(opts,
+                                           m->extra_opts, &m->option_offset);
+
                                        optind--;
                                        continue;
                                }