The conntrack match extension doesn't handle address inversion correctly. (Tom Eastep)

diff --git a/extensions/libipt_conntrack.c b/extensions/libipt_conntrack.c
index 5521684842cbf29aae60155dca492af90c9df62d..27870b1e834e79320c9a9b6d76a4f993831a2a5a 100644 (file)
--- a/extensions/libipt_conntrack.c
+++ b/extensions/libipt_conntrack.c
@@ -414,8 +414,8 @@ print_addr(struct in_addr *addr, struct in_addr *mask, int inv, int numeric)
 {
        char buf[BUFSIZ];
 
-        if (inv)
-                       fputc('!', stdout);
+        if (inv) 
+                       printf("! ");
 
        if (mask->s_addr == 0L && !numeric)
                printf("%s ", "anywhere");