Hi,

I found a minor bug in iptables.c. Assuming that;

iptables -A INPUT -i + -j ACCEPT == iptables -A INPUT -j ACCEPT

giving "+" as interface value is same as giving no interface value. But the output of "iptables -nvL" is "+" as interface value for "-i +". If no interface value is given "iptables -nvL" prints "*". (Also iptables-save ignores single "+" as interface value, as normally it should)

This can be fixed by changing
"if (vialen == 0)" in iptables.c

"if ( (vialen == 0) || (vialen == 1 && vianame[0] == '+') )"

I attached the patches for iptables.c and ip6tables.c.

regards,
Ozgur AKAN