Don't move rules from a chain with references

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-06-09 13:35:49 -07:00
parent 9555a552c2
commit 1399a8ffde

View File

@ -1026,6 +1026,10 @@ sub use_forward_chain($$) {
return 1 if @{$chainref->{rules}} && ( $config{OPTIMIZE} & 4096 );
#
# Use it if we already have jumps to it
#
return 1 if keys %{$chainref->{references}};
#
# We must use the interfaces's chain if the interface is associated with multiple zones
#
return 1 if ( keys %{interface_zones $interface} ) > 1;