From 3a2570ff86746cd71f98fbf9abd6a1c387b30cb8 Mon Sep 17 00:00:00 2001
From: Wang Sen Di <wangsendi@vip.qq.com>
Date: Wed, 3 Dec 2025 09:50:54 +0800
Subject: [PATCH] -

---
 netflow/iptables.sh | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/netflow/iptables.sh b/netflow/iptables.sh
index f75b62e..d108686 100644
--- a/netflow/iptables.sh
+++ b/netflow/iptables.sh
@@ -17,7 +17,7 @@ __get_mount_paths_cgroup_id() {
 		fi
 	done
 }
-__get_mount_paths_cgroup_id
+# __get_mount_paths_cgroup_id
 
 __main() {
 	update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null
@@ -29,6 +29,17 @@ __main() {
 	_owner_id=52000
 	_chain="output_netflow_owner_${_owner_id}"
 
+	for cmd in iptables ip6tables; do
+		$cmd -t mangle -N "$_chain" 2>/dev/null || true
+		if ! $cmd -t mangle -C OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain" 2>/dev/null; then
+			$cmd -t mangle -A OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain"
+		fi
+		if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
+			$cmd -t mangle -A "$_chain" -j RETURN
+		fi
+		$cmd -t mangle -L OUTPUT -v -n -x
+	done
+
 	for cgid in "${_cgroup_ids[@]}"; do
 		for cmd in iptables ip6tables; do
 			$cmd -t mangle -N "$_chain" 2>/dev/null || true