X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/78061632b725f9ef5b2096fe0943162d78355ac5..e21970fb2fe2b2f5ca1c7f2908ca3c565837d4c7:/classify.m4

diff --git a/classify.m4 b/classify.m4
index 79401f6..5b6f209 100644
--- a/classify.m4
+++ b/classify.m4
@@ -250,7 +250,7 @@ trace "alladdrs = $alladdrs"
 
 ## Populate the `out-classify' chain, matching networks.
 prepare_to () { mode=goto fail=mark-to-$net_class_default; }
-matchnets -d mark-from : prepare_to out-classify "" 0 $allnets
+matchnets -d mark-to : prepare_to out-classify "" 0 $allnets
 
 ## A `finish' hook for rejecting known address ranges arriving on a
 ## default-reachable interface.