From 38aa7f3857bfcb6e4e0cf8d27167ee7a3857353b Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sat, 5 Jan 2013 08:26:46 -0800
Subject: [PATCH] Correct opcode inversion when not ARPTABLES_JF

Signed-off-by: Tom Eastep <teastep@mint14.(none)>
---
 Shorewall/Perl/Shorewall/ARP.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall/Perl/Shorewall/ARP.pm b/Shorewall/Perl/Shorewall/ARP.pm
index a2cf2749a..38c4edc92 100644
--- a/Shorewall/Perl/Shorewall/ARP.pm
+++ b/Shorewall/Perl/Shorewall/ARP.pm
@@ -165,7 +165,7 @@ sub process_arprule() {
     if ( $opcode ne '-' ) {
 	my $invert = ( $opcode =~ s/^!// ) ? '! ' : '';
 	fatal_error "Invalid ARP OPCODE ($opcode)" unless $opcode =~ /^\d$/ && $opcode;
-	$rule .= $arptablesjf ? " --arpop ${invert}$map[$opcode] " : "--opcode $opcode ";
+	$rule .= $arptablesjf ? " --arpop ${invert}$map[$opcode] " : "--opcode ${invert}$opcode ";
     }
 
     $functions{$action} ->();