forked from extern/shorewall_code
Handle omitted port[-range] in SNAT correctly.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
032a16eb43
commit
10c1ad245a
@ -287,7 +287,7 @@ sub process_one_masq1( $$$$$$$$$$$$ )
|
|||||||
validate_address $ipaddr, 0;
|
validate_address $ipaddr, 0;
|
||||||
}
|
}
|
||||||
validate_portpair1( $proto, $rest ) if supplied $rest;
|
validate_portpair1( $proto, $rest ) if supplied $rest;
|
||||||
$addrlist .= "--to-source $addr ";
|
$addrlist .= "--to-source $ipaddr ";
|
||||||
$exceptionrule = do_proto( $proto, '', '' ) if $addr =~ /:/;
|
$exceptionrule = do_proto( $proto, '', '' ) if $addr =~ /:/;
|
||||||
} else {
|
} else {
|
||||||
my $ports = $addr;
|
my $ports = $addr;
|
||||||
|
@ -5560,7 +5560,7 @@ sub process_snat1( $$$$$$$$$$$$ ) {
|
|||||||
validate_address $ipaddr, 0;
|
validate_address $ipaddr, 0;
|
||||||
}
|
}
|
||||||
validate_portpair1( $proto, $rest ) if supplied $rest;
|
validate_portpair1( $proto, $rest ) if supplied $rest;
|
||||||
$addrlist .= " --to-source $addr";
|
$addrlist .= " --to-source $ipaddr";
|
||||||
$exceptionrule = do_proto( $proto, '', '' ) if $addr =~ /:/;
|
$exceptionrule = do_proto( $proto, '', '' ) if $addr =~ /:/;
|
||||||
} else {
|
} else {
|
||||||
my $ports = $addr;
|
my $ports = $addr;
|
||||||
|
Loading…
Reference in New Issue
Block a user