From 738a6de11b3f3b2c7a93f9ce7a40b32707d693e4 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Mon, 28 Dec 2009 07:36:15 -0800
Subject: [PATCH] Make use of interface chains deterministic

---
 Shorewall/Perl/Shorewall/Rules.pm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Shorewall/Perl/Shorewall/Rules.pm b/Shorewall/Perl/Shorewall/Rules.pm
index 4e7330b01..6b8f74597 100644
--- a/Shorewall/Perl/Shorewall/Rules.pm
+++ b/Shorewall/Perl/Shorewall/Rules.pm
@@ -1710,7 +1710,7 @@ sub generate_matrix() {
 		my $sourcechainref;
 		my $interfacematch = '';
 
-		if ( use_forward_chain( $interface ) ) {
+		if ( use_forward_chain( $interface ) || $forward_jump_added{$interface} ) {
 		    $sourcechainref = $filter_table->{forward_chain $interface};
 		    add_jump $filter_table->{FORWARD} , $sourcechainref, 0 , match_source_dev( $interface ) unless $forward_jump_added{$interface}++;
 		} else {
@@ -1822,7 +1822,7 @@ sub generate_matrix() {
 			    my $outputref;
 			    my $interfacematch = '';
 
-			    if ( use_output_chain $interface ) {
+			    if ( use_output_chain( $interface ) || $output_jump_added{$interface} ) {
 				$outputref = $filter_table->{output_chain $interface};
 				add_jump $filter_table->{OUTPUT}, $outputref, 0, match_dest_dev( $interface ) unless $output_jump_added{$interface}++;
 			    } else {
@@ -1871,7 +1871,7 @@ sub generate_matrix() {
 			my $inputchainref;
 			my $interfacematch = '';
 
-			if ( use_input_chain $interface ) {
+			if ( use_input_chain( $interface ) || $input_jump_added{$interface} ) {
 			    $inputchainref = $filter_table->{input_chain $interface};
 			    add_jump $filter_table->{INPUT}, $inputchainref, 0, match_source_dev($interface) unless $input_jump_added{$interface}++;
 			} else {