From ad2ddec8bec76a23bf8fcf4ad6f96cb8ae189c68 Mon Sep 17 00:00:00 2001
From: Loong <loong.dai@intel.com>
Date: Thu, 13 Apr 2023 22:53:23 +0800
Subject: [PATCH] iptables: ignore root traffic

Signed-off-by: Loong <loong.dai@intel.com>
---
 internal/iptables/iptables.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/iptables/iptables.go b/internal/iptables/iptables.go
index 4356c04b..0b43fbff 100644
--- a/internal/iptables/iptables.go
+++ b/internal/iptables/iptables.go
@@ -113,7 +113,7 @@ func (fc FirewallConfiguration) addOutgoingTrafficRules(existingRules []byte, co
 	}
 
 	// Ignore traffic from the proxy
-	if fc.ProxyUID > 0 {
+	if fc.ProxyUID >= 0 {
 		commands = append(commands, fc.makeIgnoreUserID(outputChainName, fc.ProxyUID, "ignore-proxy-user-id"))
 	}