From 67277b133393ee445f5c78f5609530353bf837ea Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Fri, 3 Feb 2006 21:44:35 +0000
Subject: [PATCH] Fix firewall-generated broadcast traffic with maclist

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3430 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/compiler | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Shorewall/compiler b/Shorewall/compiler
index bb84e2457..c716911ba 100755
--- a/Shorewall/compiler
+++ b/Shorewall/compiler
@@ -2452,8 +2452,7 @@ ${INDENT}    fatal_error "Interface $interface must be up before Shorewall can s
 
 ${INDENT}ip -f inet addr show $interface 2> /dev/null | grep 'inet.*brd' | sed 's/inet //; s/brd //; s/scope.*//;' | while read address broadcast; do
 ${INDENT}    address=\${address%/*}
-${INDENT}    if [ -n "\$broadcast" ]; then
-${INDENT}       run_iptables -t $MACLIST_TABLE -A $chain -s \$address -d \$broadcast -j RETURN
+${INDENT}    run_iptables -t $MACLIST_TABLE -A $chain -s \$address -j RETURN
 ${INDENT}    fi
 ${INDENT}done