diff --git a/Shorewall/Perl/Shorewall/Policy.pm b/Shorewall/Perl/Shorewall/Policy.pm
index 411483273..e92cc9389 100644
--- a/Shorewall/Perl/Shorewall/Policy.pm
+++ b/Shorewall/Perl/Shorewall/Policy.pm
@@ -280,9 +280,9 @@ sub save_policies() {
my $policyref = $filter_table->{ $chainref->{policychain} };
if ( $policyref->{referenced} ) {
- emit_unindented "$zone1 \t=> $zone2 is " . $policyref->{policy} . ' using chain ' . $policyref->{name};
- } else {
- emit_unindented "$zone1 \t=> $zone2 is " . $policyref->{policy};
+ emit_unindented "$zone1 \t=>\t$zone2\t" . $policyref->{policy} . ' using chain ' . $policyref->{name};
+ } elsif ( $zone1 ne $zone2 ) {
+ emit_unindented "$zone1 \t=>\t$zone2\t" . $policyref->{policy};
}
}
}
diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt
index 001607d6e..8a23e5e6e 100644
--- a/Shorewall/releasenotes.txt
+++ b/Shorewall/releasenotes.txt
@@ -284,8 +284,11 @@ None.
Example:
- net => loc is DROP using chain net2loc
+ net => loc DROP using chain net2loc
+ Note that implicit intrazone ACCEPT policies are not displayed for
+ zones associated with a single network where that network
+ doesn't specify 'routeback'.
----------------------------------------------------------------------------
N E W F E A T U R E S I N 4 . 4 . 0
diff --git a/manpages/shorewall.xml b/manpages/shorewall.xml
index 98bd2ee78..ef7d2af34 100644
--- a/manpages/shorewall.xml
+++ b/manpages/shorewall.xml
@@ -1289,7 +1289,10 @@
Added in Shorewall 4.4.4. Displays the applicable policy
- between each pair of zones.
+ between each pair of zones. Note that implicit intrazone
+ ACCEPT policies are not displayed for zones associated with a
+ single network where that network doesn't specify
+ .
diff --git a/manpages6/shorewall6.xml b/manpages6/shorewall6.xml
index 5d1aca093..afd8be1f1 100644
--- a/manpages6/shorewall6.xml
+++ b/manpages6/shorewall6.xml
@@ -1097,7 +1097,10 @@
Added in Shorewall 4.4.4. Displays the applicable policy
- between each pair of zones.
+ between each pair of zones. Note that implicit intrazone
+ ACCEPT policies are not displayed for zones associated with a
+ single network where that network doesn't specify
+ .