From 3d5c5a03374f971d371a27fc73ebb40e100f9652 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Guido=20J=C3=A4kel?= <g.jaekel@dnb.de>
Date: Wed, 15 Oct 2025 13:43:35 +0200
Subject: [PATCH] Fix expansion of pre-rule parameter

If the `pre-rule` paramater is used -- i.e. not empty -- it is expanded without a separating whithespace to the next parmeters -- typical `-p ...`. This causes the call of the `iptables` command to fail.

Just add a space to separate the expanded variables; the superfluous space in case of an empty pre-role seems tolerable to me.
---
 config/action.d/iptables.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/action.d/iptables.conf b/config/action.d/iptables.conf
index 86ac736d..0049ad9b 100644
--- a/config/action.d/iptables.conf
+++ b/config/action.d/iptables.conf
@@ -79,7 +79,7 @@ _ipt_check_rules = <_ipt-iter>
               %(_ipt_check_rule)s
               <_ipt-done>
 
-_ipt_chain_rule = <pre-rule><ipt_<type>/_chain_rule>
+_ipt_chain_rule = <pre-rule> <ipt_<type>/_chain_rule>
 _ipt_check_rule = <iptables> -C $chain %(_ipt_chain_rule)s
 _ipt_rule_target = f2b-<name>