Regular code path doesn't hit this because the conversion to libnftnl_rule takes care of it already. Future changes though will cause iptables_command_state objects to be printed directly, making this relevant. Signed-off-by: Phil Sutter <phil@xxxxxx> --- iptables/nft-bridge.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/iptables/nft-bridge.c b/iptables/nft-bridge.c index f4a3c69ac1660..0f85e21861cde 100644 --- a/iptables/nft-bridge.c +++ b/iptables/nft-bridge.c @@ -212,7 +212,7 @@ static bool nft_rule_to_ebtables_command_state(struct nft_handle *h, static void print_iface(const char *option, const char *name, bool invert) { - if (*name) + if (*name && (strcmp(name, "+") || invert)) printf("%s%s %s ", invert ? "! " : "", option, name); } -- 2.43.0