From 317f12041ba7ab21e21431fc2cc67011c338098a Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sat, 30 Sep 2017 15:43:17 -0700
Subject: [PATCH] Strengthen the test for empty SPD entries

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall-core/lib.cli | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/Shorewall-core/lib.cli b/Shorewall-core/lib.cli
index ffc6838e2..94427fe7f 100644
--- a/Shorewall-core/lib.cli
+++ b/Shorewall-core/lib.cli
@@ -1142,11 +1142,11 @@ show_a_macro() {
 spd_filter()
 {
     awk \
-    'BEGIN            { skip=0; }; \
-    /^src/            { skip=0; }; \
-    /^src 0.0.0.0\/0/ { skip=1; }; \
-    /^src ::\/0/      { skip=1; }; \
-                      { if ( skip == 0 ) print; };'
+    'BEGIN                                  { skip=0; }; \
+    /^src/                                  { skip=0; }; \
+    /^src 0.0.0.0\/0 dst 0.0.0.0\/0 uid 0$/ { skip=1; }; \
+    /^src ::\/0 dst ::\/0 uid 0$/           { skip=1; }; \
+                                            { if ( skip == 0 ) print; };'
 }
 #
 # Print a heading with leading and trailing black lines