Don't allow :persistent in a MASQUERADE rule.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-02-27 12:48:27 -08:00
parent 418034579f
commit 22c614d30b

View File

@ -308,7 +308,8 @@ sub process_one_masq1( $$$$$$$$$$ )
$target .= $addrlist;
} else {
require_capability( 'MASQUERADE_TGT', 'Masquerade rules', '' ) if $family == F_IPV6;
fatal_error( "':persistent' is not allowed in a MASQUERADE rule" ) if $persistent;
require_capability( 'MASQUERADE_TGT', 'Masquerade rules', '' ) if $family == F_IPV6;
}
}