From de1a5a8024b0b90ea8680c682e9d40c4f13aecff Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Mon, 25 Feb 2013 06:42:19 -0800
Subject: [PATCH] Handle SNAT 'ADDRESS' without enclosing [...]

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall/Perl/Shorewall/Nat.pm | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/Shorewall/Perl/Shorewall/Nat.pm b/Shorewall/Perl/Shorewall/Nat.pm
index cb83b81ef..8e3510fe9 100644
--- a/Shorewall/Perl/Shorewall/Nat.pm
+++ b/Shorewall/Perl/Shorewall/Nat.pm
@@ -262,6 +262,14 @@ sub process_one_masq1( $$$$$$$$$$ )
 				    $exceptionrule = do_proto( $proto, '', '' );
 				    $addrlist .= "--toports $ports ";
 				}
+			    } else {
+				if ( $addr =~ /^(.+)-(.+)$/ ) {
+				    validate_range( $1, $2 );
+				} else {
+				    validate_address $addr, 0;
+				}
+
+				$addrlist .= "--to-source $addr ";
 			    }
 			}
 		    }