From fd87ddf83d1ce21bc7cf2f6ab34bb85c4464e955 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Fri, 3 Feb 2006 21:56:33 +0000
Subject: [PATCH] Fix firewall-generated broadcast traffic with maclist -- take
 3

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3432 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/compiler | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Shorewall/compiler b/Shorewall/compiler
index 0725f2e5f..e2f187569 100755
--- a/Shorewall/compiler
+++ b/Shorewall/compiler
@@ -2452,7 +2452,12 @@ ${INDENT}    fatal_error "Interface $interface must be up before Shorewall can s
 
 ${INDENT}ip -f inet addr show $interface 2> /dev/null | grep 'inet.*brd' | sed 's/inet //; s/brd //; s/scope.*//;' | while read address broadcast; do
 ${INDENT}    address=\${address%/*}
-${INDENT}    run_iptables -t $MACLIST_TABLE -A $chain -s \$address -j RETURN
+${INDENT}    if [ -n "\$broadcast" ]; then
+${INDENT}        run_iptables -t $MACLIST_TABLE -A $chain -s \$address -d \$broadcast -j RETURN
+${INDENT}    fi
+${INDENT}
+${INDENT}    run_iptables -t $MACLIST_TABLE -A $chain -s \$address -d 255.255.255.255 -j RETURN
+${INDENT}    run_iptables -t $MACLIST_TABLE -A $chain -s \$address -d 224.0.0.0/4     -j RETURN
 ${INDENT}done
 
 __EOF__