Since iptables v1.8.11, `iptables -C` commands return unexpected zero status even for cases when the rules don't exist. This breaks e.g. standard Docker operation, where checking for existing rules is used extensively when creating networks. The patch fixing the behavior is available upstream - apply it to v1.8.11 before a newer version is available. Signed-off-by: Jan Čermák <sairon@sairon.cz> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>