mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-21 23:23:13 +01:00
Correct src-dst single exclusion
Match the destination address in the output chain Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
a9359d2610
commit
467cc4c252
@ -1069,7 +1069,7 @@ sub add_common_rules ( $ ) {
|
||||
|
||||
if ( $setting & DBL_DST ) {
|
||||
add_dbl_exclusion_ijump( $forward_option_chainref, $dbl_dst_target, $hostref, $dbl_ipset, 0, @state, @out_policy );
|
||||
add_dbl_exclusion_ijump( $output_option_chainref, $dbl_dst_target, $hostref, $dbl_ipset, 1, @state, @out_policy );
|
||||
add_dbl_exclusion_ijump( $output_option_chainref, $dbl_dst_target, $hostref, $dbl_ipset, 0, @state, @out_policy );
|
||||
}
|
||||
|
||||
$dbl_ipset = ''; # All ipset jumps have been added
|
||||
|
Loading…
Reference in New Issue
Block a user