From e2b1069c1c99c1480deb0feb8683fb9103f70ec4 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Thu, 28 Apr 2011 09:29:54 -0700
Subject: [PATCH] Support ipsets in the ORIGINAL DEST column for DNAT and
 REDIRECT rules.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall/Perl/Shorewall/Rules.pm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Shorewall/Perl/Shorewall/Rules.pm b/Shorewall/Perl/Shorewall/Rules.pm
index d5c74617f..3ec70e334 100644
--- a/Shorewall/Perl/Shorewall/Rules.pm
+++ b/Shorewall/Perl/Shorewall/Rules.pm
@@ -2013,6 +2013,7 @@ sub process_rule1 ( $$$$$$$$$$$$$$$$ ) {
 	    $loglevel = '';
 	    $dest     = $server;
 	    $action   = 'ACCEPT';
+	    $origdest = ALLIP if  $origdest =~ /[+]/;
 	}
     } elsif ( $actiontype & NONAT ) {
 	#