fix deprecated iptables command syntax

* src/util/iptables.c: `--option !  this` is deprecated in favor of
  `! --option this` syntax, change the output command accordingly

diff --git a/src/util/iptables.c b/src/util/iptables.c
index 284f3c0f02dd69cdfebe645bacfbf64645ac1731..36d65e43188b049b4121ffb16e133f3cf7bb2922 100644 (file)
--- a/src/util/iptables.c
+++ b/src/util/iptables.c
@@ -1067,7 +1067,7 @@ iptablesForwardMasquerade(iptablesContext *ctx,
         return iptablesAddRemoveRule(ctx->nat_postrouting,
                                      action,
                                      "--source", network,
-                                     "--destination", "!", network,
+                                     "!", "--destination", network,
                                      "--out-interface", physdev,
                                      "--jump", "MASQUERADE",
                                      NULL);
@@ -1075,7 +1075,7 @@ iptablesForwardMasquerade(iptablesContext *ctx,
         return iptablesAddRemoveRule(ctx->nat_postrouting,
                                      action,
                                      "--source", network,
-                                     "--destination", "!", network,
+                                     "!", "--destination", network,
                                      "--jump", "MASQUERADE",
                                      NULL);
     }