guarded ITERation through patterns by if-clause for it only gets performed in case of still unknown community

src/sn_utils.c

@@ -816,8 +816,10 @@ static int process_udp(n2n_sn_t * sss,
       existance (better from the security standpoint)
     */
 
+    if (!comm) {
       HASH_ITER(hh, sss->rules, re, tmp_re) {
         allowed_match = re_matchp(re->rule, cmn.community, &match_length);
+
         if( (allowed_match != -1)
           && (match_length == strlen(cmn.community)) // --- only full matches allowed (remove, if also partial matches wanted)
           && (allowed_match == 0)) {                 // --- only full matches allowed (remove, if also partial matches wanted)
@@ -825,6 +827,7 @@ static int process_udp(n2n_sn_t * sss,
           break;
         }
       }
+    }
 
     if(!comm && (!sss->lock_communities || (match == 1))) {
       comm = calloc(1, sizeof(struct sn_community));