From 293cd1d66a37a15b6a47b555374e5714e0bbcbef Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Wed, 6 Apr 2016 09:14:06 -0700 Subject: [PATCH] Always go to the reject chain rather than jump to it Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/Chains.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm index 0fd931704..404e98f84 100644 --- a/Shorewall/Perl/Shorewall/Chains.pm +++ b/Shorewall/Perl/Shorewall/Chains.pm @@ -7744,7 +7744,7 @@ sub expand_rule( $$$$$$$$$$$$;$ ) # No logging or user-specified logging -- add the target rule with matches to the rule chain # if ( $targetref ) { - add_expanded_jump( $chainref, $targetref , 0, $prerule . $matches ); + add_expanded_jump( $chainref , $targetref , $targetref->{name} eq 'reject' , $prerule . $matches ); } else { add_rule( $chainref, $prerule . $matches . $jump , 1 ); }