xtables-compat-restore: fix translation of mangle's OUTPUT

This chain should be translated as a route chain, not as a filter chain.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/iptables/xtables-translate.c b/iptables/xtables-translate.c
index 3e6c7051d2f80000997d68f7fdd9d7731549284c..4f6a9caf72e04f20d542d1f52c2773c85d83dd6b 100644 (file)
--- a/iptables/xtables-translate.c
+++ b/iptables/xtables-translate.c
@@ -357,6 +357,8 @@ static int xlate_chain_set(struct nft_handle *h, const char *table,
 
        if (strcmp(table, "nat") == 0)
                type = "nat";
+       else if (strcmp(table, "mangle") == 0 && strcmp(chain, "OUTPUT") == 0)
+               type = "route";
 
        printf("add chain %s %s %s { type %s ",
               family2str[h->family], table, chain, type);