Hello, I made a patch to address this specific issue, it's currently in iptables' git master (so probably for a future iptables 1.8.4). I guess it should probably be backported to any 1.8.x-y version.
https://git.netfilter.org/iptables/commit/?id=d76475ce1c30f6c3e3f3ca85964bdfc4425acb81 regards, Adel Belhouane.
