From 53571043c0e61856d81a94315b4c1a5ccbd29543 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 11 Apr 2011 17:18:39 -0700 Subject: [PATCH] Fix another proto editing defect --- Shorewall/Perl/Shorewall/Chains.pm | 2 +- Shorewall/Perl/Shorewall/IPAddrs.pm | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm index 7fc6bf0f6..e89b9f912 100644 --- a/Shorewall/Perl/Shorewall/Chains.pm +++ b/Shorewall/Perl/Shorewall/Chains.pm @@ -2223,7 +2223,7 @@ sub do_proto( $$$;$ ) if ( defined $protonum ) { # - # Protocol is numeric and <= 65535 or is defined in /etc/protocols or NSS equivalent + # Protocol is numeric and <= 255 or is defined in /etc/protocols or NSS equivalent # fatal_error "'!0' not allowed in the PROTO column" if $invert && ! $protonum; diff --git a/Shorewall/Perl/Shorewall/IPAddrs.pm b/Shorewall/Perl/Shorewall/IPAddrs.pm index 57d098851..b1fbc2d21 100644 --- a/Shorewall/Perl/Shorewall/IPAddrs.pm +++ b/Shorewall/Perl/Shorewall/IPAddrs.pm @@ -330,7 +330,7 @@ sub resolve_proto( $ ) { if ( $proto =~ /^\d+$/ || $proto =~ /^0x/ ) { $number = numeric_value ( $proto ); - defined $number && $number <= 65535 ? $number : undef; + defined $number && $number <= 255 ? $number : undef; } else { # # Allow 'icmp' as a synonym for 'ipv6-icmp' in IPv6 compilations