diff --git a/Shorewall/Perl/Shorewall/Rules.pm b/Shorewall/Perl/Shorewall/Rules.pm index 45c66d888..2c45ec607 100644 --- a/Shorewall/Perl/Shorewall/Rules.pm +++ b/Shorewall/Perl/Shorewall/Rules.pm @@ -1656,7 +1656,11 @@ sub process_macro ($$$$$$$$$$$$$$$$$$$) { next; } - $mtarget = merge_levels $target, $mtarget; + unless ( $section eq 'DEFAULTACTION' ) { + $mtarget = merge_levels $target, $mtarget; + } else { + $mtarget = merge_levels( $target, $mtarget ) if $mtarget eq 'LOG'; + } if ( $mtarget =~ /^PARAM(:.*)?$/ ) { fatal_error 'PARAM requires a parameter to be supplied in macro invocation' unless $param ne '';