tree 9c20cb433358f68cdff0abd555d502cc70c86650
parent 009bb1ae47f76fc538e0d6365448687f27d0f015
author Pablo Neira Ayuso <pablo@netfilter.org> 1384779021 +0100
committer Pablo Neira Ayuso <pablo@netfilter.org> 1388443853 +0100

nft: fix inversion of built-in selectors

(0ab045f xtables: fix missing ipt_entry for MASQUERADE target) broke
inversion of built-in selectors, such as -s, -d, etc.

We need to refresh the invflags if -p is used or set it for first
time if -p is not used, otherwise inversion is ignored.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>