Issue a warning when a rule is dropped do to terminated chain.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-05-29 21:01:07 -07:00
parent e405ab80bf
commit a550dd3eed

View File

@ -7062,7 +7062,10 @@ sub expand_rule( $$$$$$$$$$$;$ )
$logname, # Name of chain to name in log messages
) = @_;
return '' if $chainref->{complete};
if ( $chainref->{complete} ) {
warning_message "Chain $chainref->{name} is complete - unreachable netfilter rule(s) discarded";
return '';
}
my ( $iiface, $diface, $inets, $dnets, $iexcl, $dexcl, $onets , $oexcl, $trivialiexcl, $trivialdexcl ) =
( '', '', '', '', '', '', '', '', '', '' );