diff --git a/redirect_nftables_exprs.go b/redirect_nftables_exprs.go index 24af90f1..8a54c706 100644 --- a/redirect_nftables_exprs.go +++ b/redirect_nftables_exprs.go @@ -149,17 +149,16 @@ func nftablesCreateIPSet( if (family == nftables.TableFamilyIPv4) != rr.From().Is4() { continue } - endAddr := rr.To().Next() - if !endAddr.IsValid() { - endAddr = rr.From() - } setElements = append(setElements, nftables.SetElement{ Key: rr.From().AsSlice(), }) - setElements = append(setElements, nftables.SetElement{ - Key: endAddr.AsSlice(), - IntervalEnd: true, - }) + endAddr := rr.To().Next() + if endAddr.IsValid() { + setElements = append(setElements, nftables.SetElement{ + Key: endAddr.AsSlice(), + IntervalEnd: true, + }) + } } if appendDefault && len(setElements) == 0 { if family == nftables.TableFamilyIPv4 {