From eb3b47ae2430b29b7a21c4a9e26625f4cdab07a0 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 7 Jan 2013 18:29:41 -0800 Subject: [PATCH] Correctly handle *C actions in arprules. Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/ARP.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Shorewall/Perl/Shorewall/ARP.pm b/Shorewall/Perl/Shorewall/ARP.pm index 37198ceb0..b8f4411da 100644 --- a/Shorewall/Perl/Shorewall/ARP.pm +++ b/Shorewall/Perl/Shorewall/ARP.pm @@ -120,7 +120,7 @@ sub process_arprule() { ); if ( supplied $newaddr ) { - fatal_error "The $action ACTION does not allow a new address" unless $action =~ /^SNAT|DNAT|SMAT|DMAT$/; + fatal_error "The $action ACTION does not allow a new address" unless $action =~ /^(?:SNAT|DNAT|SMAT|DMAT)C?$/; } else { fatal_error "The $action ACTION requires a new address" if $action =~ /^SNAT|DNAT|SMAT|DMAT$/; }