diff --git a/src/dnsmasq.c b/src/dnsmasq.c
index 1a0b2cb..7842538 100644
--- a/src/dnsmasq.c
+++ b/src/dnsmasq.c
@@ -481,10 +481,10 @@ int main (int argc, char **argv)
     need_cap_net_bind_service = 1;
 
   /* usptream servers which bind to an interface call SO_BINDTODEVICE
-     for each TCP connection, so need CAP_NET_ADMIN */
+     for each TCP connection, so need CAP_NET_RAW */
   for (serv = daemon->servers; serv; serv = serv->next)
     if (serv->interface[0] != 0)
-      need_cap_net_admin = 1;
+      need_cap_net_raw = 1;
 
   /* If we're doing Dbus or UBus, the above can be set dynamically,
      (as can ports) so always (potentially) needed. */
@@ -492,7 +492,7 @@ int main (int argc, char **argv)
   if (option_bool(OPT_DBUS))
     {
       need_cap_net_bind_service = 1;
-      need_cap_net_admin = 1;
+      need_cap_net_raw = 1;
     }
 #endif
 
@@ -500,7 +500,7 @@ int main (int argc, char **argv)
   if (option_bool(OPT_UBUS))
     {
       need_cap_net_bind_service = 1;
-      need_cap_net_admin = 1;
+      need_cap_net_raw = 1;
     }
 #endif