Stephen Hemminger wrote:
> Looks like an xt_tables bug.

Yes, an old one and a new one. I've queued these two patches.