Fix adding ipset entry comment

Author: DrGonzo

ipset_linux.go

@@ -274,16 +274,16 @@ func (h *Handle) ipsetAddDel(nlCmd int, setname string, entry *IPSetEntry) error
 	req := h.newIpsetRequest(nlCmd)
 	req.AddData(nl.NewRtAttr(nl.IPSET_ATTR_SETNAME, nl.ZeroTerminated(setname)))
 
-	if entry.Comment != "" {
-		req.AddData(nl.NewRtAttr(nl.IPSET_ATTR_COMMENT, nl.ZeroTerminated(entry.Comment)))
-	}
-
 	data := nl.NewRtAttr(nl.IPSET_ATTR_DATA|int(nl.NLA_F_NESTED), nil)
 
 	if !entry.Replace {
 		req.Flags |= unix.NLM_F_EXCL
 	}
 
+	if entry.Comment != "" {
+		data.AddChild(nl.NewRtAttr(nl.IPSET_ATTR_COMMENT, nl.ZeroTerminated(entry.Comment)))
+	}
+
 	if entry.Timeout != nil {
 		data.AddChild(&nl.Uint32Attribute{Type: nl.IPSET_ATTR_TIMEOUT | nl.NLA_F_NET_BYTEORDER, Value: *entry.Timeout})
 	}

ipset_linux_test.go

@@ -95,7 +95,7 @@ func TestIpsetCreateListAddDelDestroy(t *testing.T) {
 		Replace:  true,
 		Timeout:  &timeout,
 		Counters: true,
-		Comments: false,
+		Comments: true,
 		Skbinfo:  false,
 	})
 	if err != nil {
@@ -219,7 +219,7 @@ func TestIpsetCreateListAddDelDestroyWithTestCases(t *testing.T) {
 				Replace:  true,
 				Timeout:  &timeout,
 				Counters: true,
-				Comments: false,
+				Comments: true,
 				Skbinfo:  false,
 			},
 			entry: &IPSetEntry{
@@ -333,7 +333,7 @@ func TestIpsetCreateListAddDelDestroyWithTestCases(t *testing.T) {
 				Replace:  true,
 				Timeout:  &timeout,
 				Counters: true,
-				Comments: false,
+				Comments: true,
 				Skbinfo:  false,
 			},
 			entry: &IPSetEntry{
@@ -350,7 +350,7 @@ func TestIpsetCreateListAddDelDestroyWithTestCases(t *testing.T) {
 				Replace:  true,
 				Timeout:  &timeout,
 				Counters: true,
-				Comments: false,
+				Comments: true,
 				Skbinfo:  false,
 			},
 			entry: &IPSetEntry{
@@ -369,7 +369,7 @@ func TestIpsetCreateListAddDelDestroyWithTestCases(t *testing.T) {
 				Replace:  true,
 				Timeout:  &timeout,
 				Counters: true,
-				Comments: false,
+				Comments: true,
 				Skbinfo:  false,
 			},
 			entry: &IPSetEntry{