Avoid multiple policy matches with OPTIMIZE=7 and not KLUDGEFREE

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-03-01 08:32:37 -08:00
parent 3ba797cb14
commit cfa09dce22

View File

@ -1598,7 +1598,7 @@ sub optimize_ruleset() {
# #
# Not so easy -- the rule contains matches # Not so easy -- the rule contains matches
# #
if ( $chainref->{builtin} ) { if ( $chainref->{builtin} || ! have_capability 'KLUDGEFREE' ) {
# #
# This case requires a new rule merging algorithm. Ignore this chain for # This case requires a new rule merging algorithm. Ignore this chain for
# now. # now.