Detect bogus DNAT- rule

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9600 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2009-03-05 04:03:05 +00:00
parent 661029a38e
commit 14673e4ab5

View File

@ -1164,7 +1164,10 @@ sub process_rule1 ( $$$$$$$$$$$$$ ) {
fatal_error "Unknown source zone ($sourcezone)" unless $sourceref = defined_zone( $sourcezone );
if ( $actiontype & NATONLY ) {
warning_message "Destination zone ($destzone) ignored" unless $destzone eq '-' || $destzone eq '';
unless ( $destzone eq '-' || $destzone eq '' ) {
fatal_error "Unknown destination zone ($destzone)" unless $destref = defined_zone( $destzone );
warning_message "Destination zone ($destzone) ignored";
}
} else {
fatal_error "Missing destination zone" if $destzone eq '-' || $destzone eq '';
fatal_error "Unknown destination zone ($destzone)" unless $destref = defined_zone( $destzone );