On Mon, Dec 03, 2018 at 02:52:28PM +0100, Phil Sutter wrote: > Older versions of iptables allowed for negative realm values by accident > (they would be cast to unsigned). While this was clearly a bug, document > the fixed behaviour. Applied, thanks Phil.