From 8df8fe990a8b6d6d18802b17694fceb78d527bfb Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Wed, 22 May 2013 07:34:04 -0700
Subject: [PATCH] Allow 'local' zone to work with 'destonly'

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall/Perl/Shorewall/Misc.pm | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm
index aa405edb9..12bd9f299 100644
--- a/Shorewall/Perl/Shorewall/Misc.pm
+++ b/Shorewall/Perl/Shorewall/Misc.pm
@@ -1519,8 +1519,7 @@ sub add_interface_jumps {
     our %forward_jump_added;
     my @interfaces = grep $_ ne '%vserver%', @_;
     my $dummy;
-    my $loref = known_interface('lo');
-    my $lo_jump_added = local_zone;
+    my $lo_jump_added = local_zone && ! get_interface_option( 'lo', 'destonly' );
     #
     # Add Nat jumps
     #