diff --git a/Shorewall/Perl/Shorewall/Policy.pm b/Shorewall/Perl/Shorewall/Policy.pm index 411483273..e92cc9389 100644 --- a/Shorewall/Perl/Shorewall/Policy.pm +++ b/Shorewall/Perl/Shorewall/Policy.pm @@ -280,9 +280,9 @@ sub save_policies() { my $policyref = $filter_table->{ $chainref->{policychain} }; if ( $policyref->{referenced} ) { - emit_unindented "$zone1 \t=> $zone2 is " . $policyref->{policy} . ' using chain ' . $policyref->{name}; - } else { - emit_unindented "$zone1 \t=> $zone2 is " . $policyref->{policy}; + emit_unindented "$zone1 \t=>\t$zone2\t" . $policyref->{policy} . ' using chain ' . $policyref->{name}; + } elsif ( $zone1 ne $zone2 ) { + emit_unindented "$zone1 \t=>\t$zone2\t" . $policyref->{policy}; } } } diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt index 001607d6e..8a23e5e6e 100644 --- a/Shorewall/releasenotes.txt +++ b/Shorewall/releasenotes.txt @@ -284,8 +284,11 @@ None. Example: - net => loc is DROP using chain net2loc + net => loc DROP using chain net2loc + Note that implicit intrazone ACCEPT policies are not displayed for + zones associated with a single network where that network + doesn't specify 'routeback'. ---------------------------------------------------------------------------- N E W F E A T U R E S I N 4 . 4 . 0 diff --git a/manpages/shorewall.xml b/manpages/shorewall.xml index 98bd2ee78..ef7d2af34 100644 --- a/manpages/shorewall.xml +++ b/manpages/shorewall.xml @@ -1289,7 +1289,10 @@ Added in Shorewall 4.4.4. Displays the applicable policy - between each pair of zones. + between each pair of zones. Note that implicit intrazone + ACCEPT policies are not displayed for zones associated with a + single network where that network doesn't specify + . diff --git a/manpages6/shorewall6.xml b/manpages6/shorewall6.xml index 5d1aca093..afd8be1f1 100644 --- a/manpages6/shorewall6.xml +++ b/manpages6/shorewall6.xml @@ -1097,7 +1097,10 @@ Added in Shorewall 4.4.4. Displays the applicable policy - between each pair of zones. + between each pair of zones. Note that implicit intrazone + ACCEPT policies are not displayed for zones associated with a + single network where that network doesn't specify + .