From c2a9a61bbb641ca960ef99024c29f247ece457c2 Mon Sep 17 00:00:00 2001
From: Wang Sen Di <wangsendi@vip.qq.com>
Date: Fri, 12 Dec 2025 09:57:06 +0800
Subject: [PATCH] -

---
 netflow/iptables.sh | 26 ++++++++++++++------------
 1 file changed, 14 insertions(+), 12 deletions(-)

diff --git a/netflow/iptables.sh b/netflow/iptables.sh
index c962957..de462ed 100644
--- a/netflow/iptables.sh
+++ b/netflow/iptables.sh
@@ -8,22 +8,23 @@ __main() {
 	update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null
 	update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy 2>/dev/null
 
-	_owner_id=51000
-	_chain="output_netflow_owner_${_owner_id}"
+	_owner_ids=$(ps -eo gid --no-headers | sort -u)
+	_chain="output_netflow_owner_51000"
 
-	for cmd in iptables ip6tables; do
-		$cmd -t mangle -N "$_chain" 2>/dev/null || true
+	for _owner_id in $_owner_ids; do
+		for cmd in iptables ip6tables; do
+			$cmd -t mangle -N "$_chain" 2>/dev/null || true
 
-		if ! $cmd -t mangle -C OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain" 2>/dev/null; then
-			$cmd -t mangle -A OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain"
-		fi
+			if ! $cmd -t mangle -C OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain" 2>/dev/null; then
+				$cmd -t mangle -A OUTPUT -m owner --gid-owner "$_owner_id" -j "$_chain"
+			fi
 
-		if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
-			$cmd -t mangle -A "$_chain" -j RETURN
-		fi
-		$cmd -t mangle -L OUTPUT -v -n -x
+			if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
+				$cmd -t mangle -A "$_chain" -j RETURN
+			fi
+			$cmd -t mangle -L OUTPUT -v -n -x
+		done
 	done
-
 }
 
 __main
@@ -31,5 +32,6 @@ __main
 __help() {
 	cat >/dev/null <<-'EOF'
 
+
 	EOF
 }