diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm index fd04bc979..2c4f9c9c8 100644 --- a/Shorewall/Perl/Shorewall/Chains.pm +++ b/Shorewall/Perl/Shorewall/Chains.pm @@ -5753,8 +5753,6 @@ sub match_source_net( $;$\$ ) { } if ( $net =~ /^(!?)\^([A-Z\d]{2})$/ || $net =~ /^(!?)\^\[([A-Z,\d]+)\]$/) { - fatal_error "A countrycode list may not be used in this context" if $restriction & ( OUTPUT_RESTRICT | POSTROUTE_RESTRICT ); - require_capability 'GEOIP_MATCH', 'A country-code', ''; load_isocodes unless %isocodes; @@ -5842,8 +5840,6 @@ sub imatch_source_net( $;$\$ ) { } if ( $net =~ /^(!?)\^([A-Z\d]{2})$/ || $net =~ /^(!?)\^\[([A-Z,\d]+)\]$/) { - fatal_error "A countrycode list may not be used in this context" if $restriction & ( OUTPUT_RESTRICT | POSTROUTE_RESTRICT ); - require_capability 'GEOIP_MATCH', 'A country-code', ''; load_isocodes unless %isocodes; @@ -5928,8 +5924,6 @@ sub match_dest_net( $;$ ) { } if ( $net =~ /^(!?)\^([A-Z\d]{2})$/ || $net =~ /^(!?)\^\[([A-Z,\d]+)\]$/) { - fatal_error "A countrycode list may not be used in this context" if $restriction & (PREROUTE_RESTRICT | INPUT_RESTRICT ); - require_capability 'GEOIP_MATCH', 'A country-code', ''; load_isocodes unless %isocodes; @@ -6011,8 +6005,6 @@ sub imatch_dest_net( $;$ ) { } if ( $net =~ /^(!?)\^([A-Z\d]{2})$/ || $net =~ /^(!?)\^\[([A-Z,\d]+)\]$/) { - fatal_error "A countrycode list may not be used in this context" if $restriction & (PREROUTE_RESTRICT | INPUT_RESTRICT ); - require_capability 'GEOIP_MATCH', 'A country-code', ''; load_isocodes unless %isocodes;