From dae9ee1bafffe932ecd69bbaf88942314030cd70 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Tue, 19 Jun 2007 22:43:24 +0000
Subject: [PATCH] Allow empty BP zones -- first step toward dynamic BP zones --
 take 2

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6605 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall-common/lib.dynamiczones | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Shorewall-common/lib.dynamiczones b/Shorewall-common/lib.dynamiczones
index 7785a610f..025d40cc9 100644
--- a/Shorewall-common/lib.dynamiczones
+++ b/Shorewall-common/lib.dynamiczones
@@ -107,6 +107,8 @@ add_to_zone() # $1...${n-1} = <interface>[:<hosts>] $n = zone
 
     [ "$zone" = $FW ] && startup_error "Can't add $1 to firewall zone"
 
+    list_search $zone $BPORT_ZONES && startup_error "Bridge Port zones may not be dynamically modified"
+
     #
     # Be sure that Shorewall has been restarted using a DZ-aware version of the code
     #