bug in iptables-save/iptables-restore

[Gerry Skerbitz <gsker@attbi.com>]

I installed narc to build some firewall rules for me, but to fit it in 
well with the RedHat8 installation,
I wanted to put its rules in /etc/sysconfig/iptables.  I ran
iptables-save > /etc/sysconfig/iptables
Then I tried restoring it using
iptables-restore /etc/sysconfig iptables and got these errors:
#~>/sbin/iptables-restore /etc/sysconfig/iptables
iptables-restore v1.2.7a: length invalid: `!40'

Try `iptables-restore -h' or 'iptables-restore --help' for more information.

here are the offending lines created by iptables-save:
#~>iptables-save | grep length
-A CUST_LOG -p tcp -m length --length !40:68 -j LOG --log-prefix 
"PACKET_LENGTH_BAD: " --log-level 7 --log-tcp-options --log-ip-options
-A CUST_LOG -p tcp -m length --length !40:68 -j DROP
#~>

I just did some digging and figured out that the exclamation point 
should go before the --length 40:68.  I guess that's
what iptables-save should really do and clearly it's what narc does when 
it sets up the rule.

No reply necessary.   Thanks for all the work you do!

Gerry