diff --git a/Shorewall-shell/compiler b/Shorewall-shell/compiler index 3f3b4d7e0..3ab737f92 100755 --- a/Shorewall-shell/compiler +++ b/Shorewall-shell/compiler @@ -2134,6 +2134,9 @@ process_rule() # $1 = target *!) target=${target%!} ;; + esac + + case $target in ACCEPT+|NONAT) [ $SECTION = NEW ] || fatal_error "$target rules are not allowed in the $SECTION SECTION" nonat=Yes