From 085efc16059f24731a9fd06d536c5aa5f3f01622 Mon Sep 17 00:00:00 2001
From: Max Lv <max.c.lv@gmail.com>
Date: Thu, 10 Nov 2016 08:51:05 +0800
Subject: [PATCH] Fix the chain name conflict. #935

---
 src/acl.c | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/src/acl.c b/src/acl.c
index 713da62f..0cf0f7f5 100644
--- a/src/acl.c
+++ b/src/acl.c
@@ -49,6 +49,8 @@ static struct cork_dllist outbound_block_list_rules;
 
 #include <unistd.h>
 
+static char chain_name[64];
+
 static int
 run_cmd(const char *cmdstring)
 {
@@ -73,11 +75,13 @@ init_iptables()
 {
     if (geteuid() != 0)
         return -1;
+    sprintf(chain_name, "SHADOWSOCKS_LIBEV_%d", getpid());
     char cli[256];
     sprintf(cli,
-            "iptables -N SHADOWSOCKS_LIBEV; \
-            iptables -F SHADOWSOCKS_LIBEV; \
-            iptables -A OUTPUT -p tcp --tcp-flags RST RST -j SHADOWSOCKS_LIBEV");
+            "iptables -N %s; \
+            iptables -F %s; \
+            iptables -A OUTPUT -p tcp --tcp-flags RST RST -j %s",
+            chain_name, chain_name, chain_name);
     return run_cmd(cli);
 }
 
@@ -88,9 +92,9 @@ clean_iptables()
         return -1;
     char cli[256];
     sprintf(cli,
-            "iptables -D OUTPUT -p tcp --tcp-flags RST RST -j SHADOWSOCKS_LIBEV; \
-            iptables -F SHADOWSOCKS_LIBEV; \
-            iptables -X SHADOWSOCKS_LIBEV");
+            "iptables -D OUTPUT -p tcp --tcp-flags RST RST -j %s; \
+            iptables -F %s; \
+            iptables -X %s", chain_name, chain_name, chain_name);
     return run_cmd(cli);
 }
 
@@ -101,9 +105,9 @@ set_iptables_rules(char *addr, int add)
         return -1;
     char cli[256];
     if (add)
-        sprintf(cli, "iptables -A SHADOWSOCKS_LIBEV -d %s -j DROP", addr);
+        sprintf(cli, "iptables -A %s -d %s -j DROP", chain_name, addr);
     else
-        sprintf(cli, "iptables -D SHADOWSOCKS_LIBEV -d %s -j DROP", addr);
+        sprintf(cli, "iptables -D %s -d %s -j DROP", chain_name, addr);
     return run_cmd(cli);
 }