diff options
author | jim-p <jimp@pfsense.org> | 2012-10-05 12:30:35 -0400 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2012-10-05 12:30:35 -0400 |
commit | db277413551c7b7b5e8cfada71775ace6d7ed581 (patch) | |
tree | 41725fe6568562ddbaa3b9aa0cd738dfe32c5639 | |
parent | 2ecf5b34415c9c88056744ed1329aea09a59b045 (diff) | |
download | pfsense-db277413551c7b7b5e8cfada71775ace6d7ed581.zip pfsense-db277413551c7b7b5e8cfada71775ace6d7ed581.tar.gz |
Don't write a rule out of the natlocal_subnet is blank.
-rw-r--r-- | etc/inc/filter.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 7fbcb5e..3ffd347 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1449,7 +1449,7 @@ function filter_nat_rules_generate() { if ($local_subnet == "0.0.0.0/0") continue; $natlocal_subnet = ipsec_idinfo_to_cidr($ph2ent['natlocalid']); - if ($natlocal_subnet == "0.0.0.0/0") + if (empty($natlocal_subnet) || ($natlocal_subnet == "0.0.0.0/0")) continue; $natrules .= "{$nataction} on enc0 from {$local_subnet} to any -> {$natlocal_subnet}\n"; } |