zones: drop outgoing invalid traffic in masqueraded zones

[project/firewall3.git] / iptables.c

diff --git a/iptables.c b/iptables.c
index e9f4ca7..10bfea5 100644 (file)
--- a/iptables.c
+++ b/iptables.c
@@ -43,7 +43,7 @@
 #include "options.h"
 
 /* xtables interface */
-#if (XTABLES_VERSION_CODE == 10 || XTABLES_VERSION_CODE == 11)
+#if (XTABLES_VERSION_CODE >= 10)
 # include "xtables-10.h"
 #elif (XTABLES_VERSION_CODE == 5)
 # include "xtables-5.h"
@@ -1019,8 +1019,8 @@ fw3_ipt_rule_time(struct fw3_ipt_rule *r, struct fw3_time *time)
 
        fw3_ipt_rule_addarg(r, false, "-m", "time");
 
-       if (time->utc)
-               fw3_ipt_rule_addarg(r, false, "--utc", NULL);
+       if (!time->utc)
+               fw3_ipt_rule_addarg(r, false, "--kerneltz", NULL);
 
        if (d1)
        {