From dd353eeafb94357bf3cb79add560c4ab30890b3c Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 4 Jul 2011 07:50:25 -0700 Subject: [PATCH] Allow optimizatin of Invalid and NotSyn chains Signed-off-by: Tom Eastep --- Shorewall/action.Invalid | 2 ++ Shorewall/action.NotSyn | 2 ++ 2 files changed, 4 insertions(+) diff --git a/Shorewall/action.Invalid b/Shorewall/action.Invalid index b315bbb96..7f58e5d92 100644 --- a/Shorewall/action.Invalid +++ b/Shorewall/action.Invalid @@ -47,6 +47,8 @@ fatal_error "Invalid parameter to action Invalid" if supplied $audit && $audit log_rule_limit $level, $chainref, 'Invalid' , $action, '', $tag, 'add', "$globals{STATEMATCH} INVALID " if $level ne ''; add_jump $chainref , $target, 0, "$globals{STATEMATCH} INVALID "; +$chainref->{dont_optimize} = 0; + 1; END PERL; diff --git a/Shorewall/action.NotSyn b/Shorewall/action.NotSyn index 0ac38da28..9a5b49354 100644 --- a/Shorewall/action.NotSyn +++ b/Shorewall/action.NotSyn @@ -47,6 +47,8 @@ fatal_error "Invalid parameter to action NotSyn" if supplied $audit && $audit log_rule_limit $level, $chainref, 'NotSyn' , $action, '', $tag, 'add', '-p 6 ! --syn ' if $level ne ''; add_jump $chainref , $target, 0, '-p 6 ! --syn '; +$chainref->{dont_optimize} = 0; + 1; END PERL;