From bd64baa8d93a3b8097efdf63ec89bbfb4014e332 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Fri, 8 Mar 2013 13:08:23 -0800 Subject: [PATCH] Require at least one zone for a provider Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/Providers.pm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Shorewall/Perl/Shorewall/Providers.pm b/Shorewall/Perl/Shorewall/Providers.pm index f12050b24..ab502c396 100644 --- a/Shorewall/Perl/Shorewall/Providers.pm +++ b/Shorewall/Perl/Shorewall/Providers.pm @@ -512,6 +512,8 @@ sub process_a_provider( $ ) { $maxload += $load; } + fatal_error "A provider interface must have at least one associated zone" unless $tproxy || %{interface_zones($interface)}; + if ( $local ) { fatal_error "GATEWAY not valid with 'local' provider" unless $gatewaycase eq 'none'; fatal_error "'track' not valid with 'local'" if $track;