Better fix for $current_param in the INLINE block of process_rule()

Signed-off-by: Tom Eastep <teastep@shorewall.net>

Shorewall/Perl/Shorewall/Rules.pm

@@ -2949,17 +2949,13 @@ sub process_rule ( $$$$$$$$$$$$$$$$$$$$ ) {
 
 	$actionresult = 0;
 
-	my $save_current_param = $current_param;
-
-	$current_param = $param;
-
 	my $generated = process_inline( $basictarget,
 					$chainref,
 					$rule . $raw_matches,
 					$matches1,
 					$loglevel,
 					$target,
-					$current_param,
+					$param,
 					$source,
 					$dest,
 					$proto,
@@ -2978,8 +2974,6 @@ sub process_rule ( $$$$$$$$$$$$$$$$$$$$ ) {
 
 	( $actionresult, @columns ) = @{pop @columnstack};
 
-	$current_param = $save_current_param;
-
 	$macro_nest_level--;
 
 	return $generated;

Shorewall/action.TCPFlags

@@ -14,12 +14,12 @@ DEFAULTS -
 
 ?if @1 ne '' && @1 ne '-'
     ?if @1 eq 'audit'
-        ?set tcpflags_action A_DROP
+        ?set tcpflags_action 'A_DROP'
     ?else
 	?error The parameter to TCPFlags must be 'audit' or '-'
     ?endif
 ?else
-    ?set tcpflags_action DROP
+    ?set tcpflags_action 'DROP'
 ?endif
 
 $tcpflags_action	-	-	;;+ -p 6 --tcp-flags ALL FIN,URG,PSH