diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm index f1a8bf9f1..3a1233ed2 100644 --- a/Shorewall/Perl/Shorewall/Chains.pm +++ b/Shorewall/Perl/Shorewall/Chains.pm @@ -1096,6 +1096,8 @@ sub dont_optimize( $ ) { $chainref->{dont_optimize} = 1; + trace( $chainref, '!O', undef, '' ); + $chainref; } @@ -1109,6 +1111,8 @@ sub dont_delete( $ ) { $chainref->{dont_optimize} = $chainref->{dont_delete} = 1; + trace( $chainref, '!OD', undef, '' ); + $chainref; } @@ -1122,6 +1126,8 @@ sub dont_move( $ ) { $chainref->{dont_move} = 1; + trace( $chainref, '!M', undef, '' ); + $chainref; } diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index b9d6ef7b7..b7a99364d 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -340,6 +340,12 @@ None. P - Change a built-in chains policy. Chains in the filter table are created with a DROP policy. All other builtin chains have policy ACCEPT. + ! Followed by one or more of the following to indicate that + the operation is not allowed on the chain. + + O - Optimize + D - Delete + M - Move rules Netfilter trace records indicate the table and chain being changed. If the change involves a particular rule, then the rule