@@ -882,9 +882,7 @@ addToStore:

 		c.Unlock()

 	}

-	c.Lock()

-	arrangeUserFilterRule()

-	c.Unlock()

+	c.arrangeUserFilterRule()

 	return network, nil

 }

@@ -7,6 +7,17 @@ import (

 const userChain = "DOCKER-USER"

+func (c *controller) arrangeUserFilterRule() {

+	c.Lock()

+	arrangeUserFilterRule()

+	c.Unlock()

+	iptables.OnReloaded(func() {

+		c.Lock()

+		arrangeUserFilterRule()

+		c.Unlock()

+	})

+}

+

 // This chain allow users to configure firewall policies in a way that persists

 // docker operations/restarts. Docker will not delete or modify any pre-existing

 // rules from the DOCKER-USER filter chain.

@@ -2,5 +2,5 @@

 package libnetwork

-func arrangeUserFilterRule() {

+func (c *controller) arrangeUserFilterRule() {

 }