From c07e450d5af7603d17eff3e24d8b805232d9e193 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Thu, 22 Jan 2004 03:27:03 +0000
Subject: [PATCH] Refine masq destination list code

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1086 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/firewall | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/Shorewall/firewall b/Shorewall/firewall
index c70c4f153..643829b38 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -3825,12 +3825,14 @@ setup_masq()
 		chain=$newchain
 		destnets=0.0.0.0/0
 
-		for addr in `separate_list $nomasq`; do
-		    addnatrule $chain -s $addr -j RETURN
-		done
+		if [ -n "$nonmasq" ]; then
+		    for addr in `separate_list $nomasq`; do
+			addnatrule $chain -s $addr -j RETURN
+		    done
+		    source="$source except $nomasq"
+		fi
 		;;
 	    *)
-
 		if [ -n "$nomasq" ]; then
 		    newchain=masq${masq_seq}
 		    createnatchain $newchain