From 1c08b71522114952d43b2f535d8ab3a43c6b691c Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Mon, 13 Nov 2006 16:00:48 +0000
Subject: [PATCH] Fix 3.3 version of maclist snafu

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4866 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/lib.maclist | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Shorewall/lib.maclist b/Shorewall/lib.maclist
index a0e7fd3fa..b3ff426d7 100644
--- a/Shorewall/lib.maclist
+++ b/Shorewall/lib.maclist
@@ -195,10 +195,9 @@ setup_mac_lists() # $1 = Phase Number
         #
         # Generate jumps from the input and forward chains
         #
-        [ -n "$POLICY_MATCH" ] && policy="-m policy --pol $ipsec --dir in" || policy=
-
         for hosts in $maclist_hosts; do
 	    ipsec=${hosts%^*}
+	    [ -n "$POLICY_MATCH" ] && policy="-m policy --pol $ipsec --dir in" || policy=
 	    hosts=${hosts#*^}
 	    interface=${hosts%%:*}
 	    hosts=${hosts#*:}