From cb1935bcd0f3318d5b6031bcde54f80ce94321c9 Mon Sep 17 00:00:00 2001
From: Robert Swiecki <robert@swiecki.net>
Date: Sun, 22 Mar 2026 01:18:19 +0100
Subject: [PATCH] net: support -t/-u for --splice-only

---
 configs/bash-with-fake-geteuid.cfg |  4 ++--
 net.cc                             | 17 ++++++++---------
 2 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/configs/bash-with-fake-geteuid.cfg b/configs/bash-with-fake-geteuid.cfg
index 0add087..cc2bcde 100644
--- a/configs/bash-with-fake-geteuid.cfg
+++ b/configs/bash-with-fake-geteuid.cfg
@@ -63,8 +63,8 @@ clone_newcgroup: true
 
 user_net {
 	enable: true
-	tcp_map_in: "auto"
-	udp_map_in: "auto"
+	tcp_map_in: "9999"
+	udp_map_in: "8888"
 	tcp_map_out: "22"
 	udp_map_out: "53"
 }
diff --git a/net.cc b/net.cc
index eac23a2..6882169 100644
--- a/net.cc
+++ b/net.cc
@@ -252,15 +252,6 @@ static bool spawnPasta(nsj_t* nsj, int pid) {
 				argv.push_back("--config-net");
 			}
 
-			if (!nsj->njc.user_net().tcp_map_in().empty()) {
-				argv.push_back("-t");
-				argv.push_back(nsj->njc.user_net().tcp_map_in().c_str());
-			}
-			if (!nsj->njc.user_net().udp_map_in().empty()) {
-				argv.push_back("-u");
-				argv.push_back(nsj->njc.user_net().udp_map_in().c_str());
-			}
-
 			if (nsj->njc.user_net().enable_dns()) {
 				argv.push_back("--dhcp-dns");
 			}
@@ -318,6 +309,14 @@ static bool spawnPasta(nsj_t* nsj, int pid) {
 			}
 		}
 
+		if (!nsj->njc.user_net().tcp_map_in().empty()) {
+			argv.push_back("-t");
+			argv.push_back(nsj->njc.user_net().tcp_map_in().c_str());
+		}
+		if (!nsj->njc.user_net().udp_map_in().empty()) {
+			argv.push_back("-u");
+			argv.push_back(nsj->njc.user_net().udp_map_in().c_str());
+		}
 		if (!nsj->njc.user_net().tcp_map_out().empty()) {
 			argv.push_back("-T");
 			argv.push_back(nsj->njc.user_net().tcp_map_out().c_str());