From a1a08d2daf02aa2c1558c95b6a7eff9982f02ad6 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Sun, 14 Jan 2007 16:56:11 +0000
Subject: [PATCH] Disallow exclusion with CONTINUE in /etc/shorewall/tcrules

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5222 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/lib.tcrules | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Shorewall/lib.tcrules b/Shorewall/lib.tcrules
index cc1eea72a..11921260c 100644
--- a/Shorewall/lib.tcrules
+++ b/Shorewall/lib.tcrules
@@ -201,6 +201,10 @@ process_tc_rule()
 	[ "x$sport" = "x-"  ] || r="${r}--sport $sport "
 
 	if [ -n "${excludesources}${excludedests}" ]; then
+
+	    [ $target = RETURN ] && \
+		fatal_error "Exclusion is currently not supported with CONTINUE"
+
 	    build_exclusion_chain chain1 mangle "$excludesources" "$excludedests"
 
 	    run_iptables2 -t mangle -A $chain $r -j $chain1