Eliminate superfluous ESTABLISHED,RELATED rule

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-01-22 16:17:19 -08:00
parent 8fe36422b5
commit 7fe2027229

View File

@ -865,7 +865,7 @@ sub finish_chain_section ($$$) {
my $save_comment = push_comment; my $save_comment = push_comment;
my $relatedchain = $chainref->{name} =~ /^\+/; my $relatedchain = $chainref->{name} =~ /^\+/;
if ( $state =~ /RELATED/ && ( $related_level || $related_target ne 'ACCEPT' ) ) { if ( $state =~ /RELATED/ && ( $relatedchain || $related_level || $related_target ne 'ACCEPT' ) ) {
if ( $related_level ) { if ( $related_level ) {
my $relatedref; my $relatedref;
@ -879,7 +879,7 @@ sub finish_chain_section ($$$) {
log_rule( $related_level, log_rule( $related_level,
$relatedref, $relatedref,
$config{RELATED_DISPOSITION}, $config{RELATED_DISPOSITION},
'' ); '' ) if $related_level;
$related_target = ensure_audit_chain( $related_target ) if ( $targets{$related_target} || 0 ) & AUDIT; $related_target = ensure_audit_chain( $related_target ) if ( $targets{$related_target} || 0 ) & AUDIT;