Don't assume 'destonly' with 'local'.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-05-12 09:58:37 -07:00
parent 6551d67b2e
commit 2fb01bec8d
2 changed files with 1 additions and 3 deletions

View File

@ -2168,7 +2168,7 @@ sub generate_matrix() {
#
# FORWARDING Jump for non-IPSEC host group
#
add_forward_jump( $zone, $interface, $hostref, $net, $exclusions, $frwd_ref, $isport, $bridge ) if $frwd_ref && $hostref->{ipsec} ne 'ipsec';
add_forward_jump( $zone, $interface, $hostref, $net, $exclusions, $frwd_ref, $isport, $bridge ) if $frwd_ref && ( $hostref->{ipsec} ne 'ipsec' && ! $hostref->{options}{local} );
}
} # Subnet Loop
} # Hostref Loop

View File

@ -1270,8 +1270,6 @@ sub process_interface( $$ ) {
$options{ignore} ||= 0;
}
$hostoptionsref->{destonly} = 1 if $hostoptionsref->{local};
$physical{$physical} = $interfaces{$interface} = { name => $interface ,
bridge => $bridge ,
filter => $filterref ,