On 11/26/2012 06:30 AM, Tom Eastep wrote:
On 11/26/2012 03:48 AM, Steven Jan Springl wrote:

I cannot find the above commit.

Correct commit is e7dee420eead7930bbfe3ac284a8a7715df56b3a.


Here is a follow-on patch that eliminates some undesirable side effects of the above commit.

Thanks,
-Tom
--
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm
index dbffc54..2260c5a 100644
--- a/Shorewall/Perl/Shorewall/Chains.pm
+++ b/Shorewall/Perl/Shorewall/Chains.pm
@@ -6070,7 +6070,7 @@ sub verify_dest_interface( $$$$ ) {
 
     fatal_error "Unknown Interface ($diface)" unless known_interface $diface;
 
-    if ( $restriction & ( PREROUTE_RESTRICT | OUTPUT_RESTRICT ) ) {
+    if ( ( $restriction & PREROUTE_RESTRICT ) || ( $chainref->{table} eq 'raw' && ( $restriction & OUTPUT_RESTRICT ) ) ) {
 	#
 	# Dest interface -- must use routing table
 	#
------------------------------------------------------------------------------
Monitor your physical, virtual and cloud infrastructure from a single
web console. Get in-depth insight into apps, servers, databases, vmware,
SAP, cloud infrastructure, etc. Download 30-day Free Trial.
Pricing starts from $795 for 25 servers or applications!
http://p.sf.net/sfu/zoho_dev2dev_nov
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to