From d8cc9c5c924035ab29eaa7c339b0f192d82731fd Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Mon, 17 Aug 2009 08:07:58 -0700
Subject: [PATCH] Fix capabilities test for PERSISTENT_SNAT

---
 Shorewall/Perl/Shorewall/Nat.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall/Perl/Shorewall/Nat.pm b/Shorewall/Perl/Shorewall/Nat.pm
index 7e5a51abf..c529af2ae 100644
--- a/Shorewall/Perl/Shorewall/Nat.pm
+++ b/Shorewall/Perl/Shorewall/Nat.pm
@@ -215,7 +215,7 @@ sub process_one_masq( )
 		$addresses =~ s/:persistent$// and $persistent = '--persistent ';
 		$addresses =~ s/:random$//     and $randomize  = '--random ';
 
-		require_capability 'PERSISTENT_SNAT', ':random', 's' if $randomize;
+		require_capability 'PERSISTENT_SNAT', ':persistent', 's' if $persistent;
 
 		if ( $addresses =~ /^SAME/ ) {
 		    fatal_error "The SAME target is no longer supported";