Don't apply rate limiting twice in ACCEPT+ rules

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-02-19 13:57:45 -08:00
parent c030bc900c
commit edaf541850

View File

@ -1182,9 +1182,9 @@ sub process_rule1 ( $$$$$$$$$$$$$ ) {
# #
# Generate Fixed part of the rule # Generate Fixed part of the rule
# #
if ( ( $actiontype & ( NATRULE | NATONLY ) ) == NATRULE ) { if ( $actiontype & ( NATRULE | NONAT ) && ! ( $actiontype & NATONLY ) ) {
# #
# Don't apply rate limiting twice # Either a DNAT, REDIRECT or ACCEPT+ rule; don't apply rate limiting twice
# #
$rule = join( '', $rule = join( '',
do_proto($proto, $ports, $sports), do_proto($proto, $ports, $sports),