diff --git a/Shorewall/functions b/Shorewall/functions index 3c9544fa7..bf4d134a0 100644 --- a/Shorewall/functions +++ b/Shorewall/functions @@ -1219,7 +1219,7 @@ determine_capabilities() { qt $IPTABLES -A fooX1234 -p tcp -m multiport --dports 21:22 -j ACCEPT && XMULTIPORT=Yes qt $IPTABLES -A fooX1234 -m policy --pol ipsec --mode tunnel --dir in -j ACCEPT && POLICY_MATCH=Yes - if qt $IPTABLES -A fooX1234 -m physdev --physdev-in eth0 -j ACCEPT; then + if qt $IPTABLES -A fooX1234 -m physdev --physdev-out eth0 -j ACCEPT; then PHYSDEV_MATCH=Yes qt $IPTABLES -A fooX1234 -m physdev --physdev-in eth1 -m physdev --physdev-out eth1 -j ACCEPT && KLUDGEFREE=Yes fi