From abc37f16d7599f4877cb8880cf6e9ef9b017668a Mon Sep 17 00:00:00 2001
From: Andrew Ruthven <puck@catalystcloud.nz>
Date: Sun, 19 Oct 2025 16:16:04 +1300
Subject: [PATCH] Accept NFLOG as a logging target for iptables.

---
 include/tests_firewalls | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/tests_firewalls b/include/tests_firewalls
index 0ed89195..56f981a6 100644
--- a/include/tests_firewalls
+++ b/include/tests_firewalls
@@ -557,7 +557,7 @@
     if [ ${SKIPTEST} -eq 0 ]; then
         if [ ${IPTABLES_ACTIVE} -eq 1 ]; then
             if [ -n "${IPTABLESSAVEBINARY}" ]; then
-                HAS_LOGGING=$(${IPTABLESSAVEBINARY} | ${GREPBINARY} "\-j LOG")
+                HAS_LOGGING=$(${IPTABLESSAVEBINARY} | ${EGREPBINARY} "\-j (NF)?LOG")
                 if [ -z "${HAS_LOGGING}" ]; then
                     Report "firewall_no_logging[]=iptables"
                 fi