+@@ -655,6 +681,8 @@ find_check_entry(struct ipt_entry *e, st
+ struct xt_entry_match *ematch;
+ unsigned long pcnt;
+
++ ip_checkdefault(&e->ip);
++
+ pcnt = xt_percpu_counter_alloc();
+ if (IS_ERR_VALUE(pcnt))
+ return -ENOMEM;
+@@ -953,6 +981,7 @@ copy_entries_to_user(unsigned int total_