extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-21 02:08:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Don't optimize away a rule that includes nfacct matches.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-06-01 13:02:39 -07:00
parent 5343243f6b
commit c5f2eeea80
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/Perl/Shorewall/Chains.pm
View File

@ -3247,7 +3247,7 @@ sub optimize_level4( $$ ) {
while ( @$rulesref ) { while ( @$rulesref ) {
my $rule1ref = $rulesref->[-1]; my $rule1ref = $rulesref->[-1];
last unless ( $rule1ref->{target} || '' ) eq $target && ! $rule1ref->{targetopts}; last unless ( $rule1ref->{target} || '' ) eq $target && ! ( $rule1ref->{targetopts} || $rule1ref->{nfacct} );
trace ( $chainref, 'D', $rule, $rule1ref ) if $debug; trace ( $chainref, 'D', $rule, $rule1ref ) if $debug;