diff --git a/Shorewall-perl/Shorewall/Actions.pm b/Shorewall-perl/Shorewall/Actions.pm index ed614ed8d..03ee90c04 100644 --- a/Shorewall-perl/Shorewall/Actions.pm +++ b/Shorewall-perl/Shorewall/Actions.pm @@ -768,6 +768,7 @@ sub process_actions3 () { } add_rule $chainref, '-m addrtype --dst-type BROADCAST -j ACCEPT'; + add_rule $chainref, '-d 224.0.0.0/4 -j ACCEPT'; } else { if ( $family == F_IPV4 ) { add_command $chainref, 'for address in $ALL_BCASTS; do'; diff --git a/Shorewall-perl/Shorewall/Rules.pm b/Shorewall-perl/Shorewall/Rules.pm index c96b56750..c105b106b 100644 --- a/Shorewall-perl/Shorewall/Rules.pm +++ b/Shorewall-perl/Shorewall/Rules.pm @@ -481,7 +481,7 @@ sub process_routestopped() { unless ( $matched ) { for my $host1 ( @allhosts ) { unless ( $host eq $host1 ) { - my ( $interface1, $h1 ) = split /:/, $host1; + my ( $interface1, $h1 ) = split /\|/, $host1; my $dest1 = match_dest_net $h1; my $desti1 = match_dest_dev $interface1; emit "$tool -A FORWARD $sourcei $desti1 $source $dest1 -j ACCEPT";