Suppress superfluous ACCEPT rule when 'lo' is attached to a 'local' zone.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-05-12 10:38:44 -07:00
parent d06a7b55b6
commit 9178ecbab0

View File

@ -1517,9 +1517,10 @@ sub add_interface_jumps {
our %input_jump_added;
our %output_jump_added;
our %forward_jump_added;
my $lo_jump_added = 0;
my @interfaces = grep $_ ne '%vserver%', @_;
my $dummy;
my $loref = known_interface('lo');
my $lo_jump_added = $loref && $loref->{options}{local};
#
# Add Nat jumps
#