forked from extern/shorewall_code
Avoid a forward jump for local zones.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
9b68204865
commit
4865899018
@ -2172,7 +2172,7 @@ sub generate_matrix() {
|
||||
#
|
||||
# FORWARDING Jump for non-IPSEC host group
|
||||
#
|
||||
add_forward_jump( $zone, $interface, $hostref, $net, $exclusions, $frwd_ref, $isport, $bridge ) if $frwd_ref && $hostref->{ipsec} ne 'ipsec' && $type ne LOOPBACK;
|
||||
add_forward_jump( $zone, $interface, $hostref, $net, $exclusions, $frwd_ref, $isport, $bridge ) if $frwd_ref && $hostref->{ipsec} ne 'ipsec' && ! ( $type & ( LOOPBACK | LOCAL ) );
|
||||
}
|
||||
} # Subnet Loop
|
||||
} # Hostref Loop
|
||||
|
Loading…
Reference in New Issue
Block a user