From 32ca53706cb17dd547f0a4f44b70ccac6201438c Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sat, 18 Apr 2020 12:43:27 -0700
Subject: [PATCH] Don't run the 'up' command twice when an dual-stack interface
 comes up

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall-init/ifupdown.debian.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/Shorewall-init/ifupdown.debian.sh b/Shorewall-init/ifupdown.debian.sh
index 65390c5db..36077f70c 100644
--- a/Shorewall-init/ifupdown.debian.sh
+++ b/Shorewall-init/ifupdown.debian.sh
@@ -127,6 +127,17 @@ esac
 [ -n "$LOGFILE" ] || LOGFILE=/dev/null
 
 for PRODUCT in $PRODUCTS; do
+    if [ -n "$ADDRFAM" -a ${COMMAND} = up ]; then
+	case $PRODUCT in
+	    *6*)
+		[ ${ADDRFAM} = inet6 ] || continue
+		;;
+	    *)
+		[ ${ADDRFAM} = inet ] || continue
+		;;
+	esac
+    fi
+
     setstatedir
 
     if [ -x $VARLIB/$PRODUCT/firewall ]; then