holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Detect missing, NIL or ALL server IP address in a DNAT rule.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-03-02 09:00:08 -08:00
parent 5ca3b795fc
commit 69f6149d4c
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Shorewall/Perl/Shorewall/Nat.pm
View File

@ -704,12 +704,12 @@ sub handle_nat_rule( $$$$$$$$$$$$ ) {
validate_range( $addr1, $addr2 );
$server = join( '-', $addr1, $addr2 );
}
} elsif ( $server eq ALLIP || $server eq NILIP ) {
fatal_error "Invalid or missing server IP address";
} else {
unless ( $server eq ALLIP ) {
$server = $1 if $family == F_IPV6 && $server =~ /^\[(.+)\]$/;
my @servers = validate_address $server, 1;
$server = join ',', @servers;
}
$server = $1 if $family == F_IPV6 && $server =~ /^\[(.+)\]$/;
my @servers = validate_address $server, 1;
$server = join ',', @servers;
}
if ( $action eq 'DNAT' ) {