On Thu, Feb 13, 2020 at 02:04:36PM +0100, Phil Sutter wrote: > In legacy iptables, only the last plus sign remains special, any > previous ones are taken literally. Therefore xtables-translate must not > replace all of them with asterisk but just the last one. Interesting corner case. LGTM.