On 04/11/2013 04:53 AM, Steven Jan Springl wrote:

> 
> Confirmed, the patch fixes the issue.

Thanks.

> 
> --------------------------------------------------------------------------------------------------
> 
> In the attached config, an interface has the option 'maclist' and the rules 
> file 
> contains:
> 
> A_DROP:warn  lan  all  tcp  99
> 
> This produces the following error message:
> 
> Compiling MAC Filtration -- Phase 2...
>    ERROR: Unknown rule target (A_DROP)
> 

The attached patch corrects the problem.

Thanks Steven,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm
index e07c6f1..f7458ba 100644
--- a/Shorewall/Perl/Shorewall/Chains.pm
+++ b/Shorewall/Perl/Shorewall/Chains.pm
@@ -2534,10 +2534,12 @@ sub ensure_audit_chain( $;$$$ ) {
 
     my $save_comment = push_comment;
 
-    my $ref = $filter_table->{$target};
+    $table = $table || 'filter';
+
+    my $ref = $chain_table{$table}{$target};
 
     unless ( $ref ) {
-	$ref = new_chain( $table || 'filter', $target );
+	$ref = new_chain( $table, $target );
 
 	unless ( $action ) {
 	    $action = $target;

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Shorewall-devel mailing list
Shorewall-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to