1 files changed, 3 insertions, 1 deletions
diff --git a/lib/Vyatta/IpTables/Mgr.pm b/lib/Vyatta/IpTables/Mgr.pm
index 19c3c29..6723bc3 100755
--- a/lib/Vyatta/IpTables/Mgr.pm
+++ b/lib/Vyatta/IpTables/Mgr.pm
@@ -230,7 +230,9 @@ sub ipt_enable_conntrack {
                 # this index does not change now but maybe later we change it, so being defensive. 
                 my $cttimeout_index = ipt_find_chain_rule($iptables_cmd, 'raw', $label, "VYATTA_CT_TIMEOUT");
                 if (defined($cttimeout_index)) {
-                  $cttimeout_index++;
+                  # $cttimeout_index++; fixing 8173
+                  # currently we have cttimeout at 1 index, it might change in future. 
+                  # helper chain should be before timeout chain 
                   system("sudo $iptables_cmd -t raw -I $label $cttimeout_index -j VYATTA_CT_HELPER");
                 }
               }