Handle UNTRACKED_DISPOSITION=ACCEPT correctly.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-02-03 07:59:47 -08:00
parent 752463bfab
commit 5b9d1a6159

View File

@ -961,13 +961,17 @@ sub finish_chain_section ($$$) {
}
}
if ( keys %state && ! $config{FASTACCEPT} ) {
if ( keys %state ) {
my @state;
for ( qw/ESTABLISHED RELATED/ ) {
push @state, $_ if $state{$_};
unless ( $config{FASTACCEPT} ) {
for ( qw/ESTABLISHED RELATED/ ) {
push @state, $_ if $state{$_};
}
}
push @state, 'UNTRACKED' if $state{UNTRACKED};
add_ijump( $chain1ref, j => 'ACCEPT', state_imatch join(',', @state ) ) if @state;
}