|  | @@ -2494,7 +2494,8 @@ policy_includes_addr_mask_implicitly(addr_policy_t *policy,
 | 
	
		
			
				|  |  |      uint32_t p_addr = policy->addr & policy->msk;
 | 
	
		
			
				|  |  |      if (p_addr == (addr & policy->msk) &&
 | 
	
		
			
				|  |  |          p_addr == (addr2 & policy->msk) &&
 | 
	
		
			
				|  |  | -        (policy->prt_min <= 1 && policy->prt_max == 65535)) {
 | 
	
		
			
				|  |  | +        (policy->prt_min <= 1 && policy->prt_max == 65535) &&
 | 
	
		
			
				|  |  | +        policy->policy_type == ADDR_POLICY_REJECT) {
 | 
	
		
			
				|  |  |        return 0;
 | 
	
		
			
				|  |  |      }
 | 
	
		
			
				|  |  |      /* Does this policy cover some of the address range we're looking at? */
 | 
	
	
		
			
				|  | @@ -2538,7 +2539,7 @@ exit_policy_implicitly_allows_local_networks(addr_policy_t *policy,
 | 
	
		
			
				|  |  |    };
 | 
	
		
			
				|  |  |    for (i=0; private_networks[i].mask; ++i) {
 | 
	
		
			
				|  |  |      p = NULL;
 | 
	
		
			
				|  |  | -    /* log_fn(LOG_INFO,"Checking network %s", private_networks[i].network); */
 | 
	
		
			
				|  |  | +    /* info(LD_CONFIG,"Checking network %s", private_networks[i].network); */
 | 
	
		
			
				|  |  |      if (policy_includes_addr_mask_implicitly(
 | 
	
		
			
				|  |  |             policy, private_networks[i].addr, private_networks[i].mask, &p)) {
 | 
	
		
			
				|  |  |        if (should_warn)
 |