From: Pablo Sebastian Greco <pablo@fliagreco.com.ar>
Date: Mon, 29 Sep 2008 06:51:32 +0000 (+0200)
Subject: mark: fix invalid iptables-save output
X-Git-Tag: v1.4.2~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3cc6fc3cbf26b847ba7232ff220b74e74e72c219;p=thirdparty%2Fiptables.git

mark: fix invalid iptables-save output

When a neg mark is saved via iptables-save it is saved as !--mark,
but this is not recognized by iptables-restore, just adding a
space to the saved file to make it look like "! --mark" makes
iptables-restore accept the file.

Signed-off-by: Pablo Sebastian Greco <pablo@fliagreco.com.ar>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/extensions/libxt_mark.c b/extensions/libxt_mark.c
index 4ee29e71..811cc77e 100644
--- a/extensions/libxt_mark.c
+++ b/extensions/libxt_mark.c
@@ -125,7 +125,7 @@ static void mark_mt_save(const void *ip, const struct xt_entry_match *match)
 	const struct xt_mark_mtinfo1 *info = (const void *)match->data;
 
 	if (info->invert)
-		printf("!");
+		printf("! ");
 
 	printf("--mark ");
 	print_mark(info->mark, info->mask);