From df09e0ccc5b13a352bcf1801ce93f6da6c0f30c6 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Fri, 28 Feb 2014 10:14:08 -0800 Subject: [PATCH] Correct the behavior of ADMINISABSENTMINDED Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/Misc.pm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm index e52ddc1e1..24d9294b5 100644 --- a/Shorewall/Perl/Shorewall/Misc.pm +++ b/Shorewall/Perl/Shorewall/Misc.pm @@ -2526,9 +2526,9 @@ EOF "restore_default_route $config{USE_DEFAULT_RT}" ); - my @chains = $config{ADMINISABSENTMINDED} ? qw/INPUT FORWARD/ : qw/INPUT OUTPUT FORWARD/; - - add_ijump $filter_table ->{$_}, j => 'ACCEPT', state_imatch 'ESTABLISHED,RELATED' for @chains; + if ( $config{ADMINISABSENTMINDED} ) { + add_ijump $filter_table ->{$_}, j => 'ACCEPT', state_imatch 'ESTABLISHED,RELATED' for qw/INPUT FORWARD/; + } if ( $family == F_IPV6 ) { add_ijump $input, j => 'ACCEPT', s => IPv6_LINKLOCAL;