
checkPorts would return nil rather than an error if the per-container DNAT chain didn't exist, meaning CHECK would erroneously return success rather than failure. chain.check() already (correctly) checks that the chain exists, so there's no need to do it separately before calling that anyway. Signed-off-by: Dan Winship <danwinship@redhat.com>