From: Steve Yarmie <steve.yarmie@gmail.com>
Date: Fri, 20 Nov 2009 14:29:59 +0000 (+0100)
Subject: fix deprecated iptables command syntax
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=264f3ddac977ce5aed64656a5a12310276d4975e;p=libvirt.git

fix deprecated iptables command syntax

* src/util/iptables.c: `--option !  this` is deprecated in favor of
  `! --option this` syntax, change the output command accordingly
---

diff --git a/src/util/iptables.c b/src/util/iptables.c
index 284f3c0f02..36d65e4318 100644
--- a/src/util/iptables.c
+++ b/src/util/iptables.c
@@ -1067,7 +1067,7 @@ iptablesForwardMasquerade(iptablesContext *ctx,
         return iptablesAddRemoveRule(ctx->nat_postrouting,
                                      action,
                                      "--source", network,
-                                     "--destination", "!", network,
+                                     "!", "--destination", network,
                                      "--out-interface", physdev,
                                      "--jump", "MASQUERADE",
                                      NULL);
@@ -1075,7 +1075,7 @@ iptablesForwardMasquerade(iptablesContext *ctx,
         return iptablesAddRemoveRule(ctx->nat_postrouting,
                                      action,
                                      "--source", network,
-                                     "--destination", "!", network,
+                                     "!", "--destination", network,
                                      "--jump", "MASQUERADE",
                                      NULL);
     }