More sfilter tweaks

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-09-02 08:41:42 -07:00
parent 6afd18646d
commit a63d4dad44

View File

@ -503,7 +503,7 @@ sub add_common_rules() {
if ( $level || $audit ) {
#
# Create a chain to log and/or audit
# Create a chain to log and/or audit and apply the policy
#
$chainref = new_standard_chain 'sfilter';
@ -514,8 +514,8 @@ sub add_common_rules() {
add_ijump $chainref, g => $policy eq 'REJECT' ? 'reject' : $policy;
$target = 'sfilter';
} elsif ( ( $target = $policy ) eq 'REJECT' ) {
$target = 'reject';
} else {
$target = $policy eq 'REJECT' ? 'reject' : $policy;
}
if ( @ipsec ) {