From a0eb91cb90c4b24751dc2f222fb221ed22b2746c Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Fri, 20 Oct 2017 08:49:14 -0700 Subject: [PATCH] Inline the Broadcast action when ADDRTYPE match is available Signed-off-by: Tom Eastep --- Shorewall/actions.std | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Shorewall/actions.std b/Shorewall/actions.std index cec2a7837..be7be7145 100644 --- a/Shorewall/actions.std +++ b/Shorewall/actions.std @@ -21,7 +21,11 @@ allowMcast inline # Silently Allow Multicast AutoBL noinline # Auto-blacklist IPs that exceed thesholds AutoBLL noinline # Helper for AutoBL BLACKLIST logjump,section # Add sender to the dynamic blacklist +?if __ADDRTYPE +Broadcast inline,audit # Handles Broadcast/Anycast +?else Broadcast noinline,audit # Handles Broadcast/Anycast +?endif DNSAmp # Matches one-question recursive DNS queries Drop # Default Action for DROP policy (deprecated) dropBcast inline # Silently Drop Broadcast