From e45fe5370565db9e9227e1017f2304dc000a7497 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sun, 25 Nov 2012 18:00:26 -0800
Subject: [PATCH] Correct another optimizer defect.

- Don't declare command-mode rules as duplicates.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall/Perl/Shorewall/Chains.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm
index b7dd104f2..0d6f6f6a5 100644
--- a/Shorewall/Perl/Shorewall/Chains.pm
+++ b/Shorewall/Perl/Shorewall/Chains.pm
@@ -3396,7 +3396,7 @@ sub delete_duplicates {
 		    next RULE unless compare_values( $baseref->{$key}, $ruleref->{$key} );
 		}
 
-		$duplicate = 1;
+		$duplicate = $ruleref->{mode} == CAT_MODE;;
 	    }
 
 	    if ( $duplicate ) {