+
+#ifndef DISABLE_IPV6
+ if (r->h->family == FW3_FAMILY_V6)
+ {
+ struct ip6t_entry *e6;
+
+ s = XT_ALIGN(sizeof(struct ip6t_entry));
+
+ for (m = r->matches; m; m = m->next)
+ s += m->match->m->u.match_size;
+
+ e6 = fw3_alloc(s + r->target->t->u.target_size);
+
+ memcpy(e6, &r->e6, sizeof(struct ip6t_entry));
+
+ e6->target_offset = s;
+ e6->next_offset = s + r->target->t->u.target_size;
+
+ s = 0;
+
+ for (m = r->matches; m; m = m->next)
+ {
+ memcpy(e6->elems + s, m->match->m, m->match->m->u.match_size);
+ s += m->match->m->u.match_size;
+ }
+
+ memcpy(e6->elems + s, r->target->t, r->target->t->u.target_size);
+
+ return e6;
+ }
+ else
+#endif
+ {
+ struct ipt_entry *e;
+
+ s = XT_ALIGN(sizeof(struct ipt_entry));
+
+ for (m = r->matches; m; m = m->next)
+ s += m->match->m->u.match_size;
+
+ e = fw3_alloc(s + r->target->t->u.target_size);
+
+ memcpy(e, &r->e, sizeof(struct ipt_entry));
+
+ e->target_offset = s;
+ e->next_offset = s + r->target->t->u.target_size;
+
+ s = 0;
+
+ for (m = r->matches; m; m = m->next)
+ {
+ memcpy(e->elems + s, m->match->m, m->match->m->u.match_size);
+ s += m->match->m->u.match_size;
+ }
+
+ memcpy(e->elems + s, r->target->t, r->target->t->u.target_size);
+
+ return e;
+ }
+}
+
+void
+__fw3_ipt_rule_append(struct fw3_ipt_rule *r, bool repl, const char *fmt, ...)
+{
+ void *rule;
+ unsigned char *mask;
+
+ struct xtables_rule_match *m;