diff options
| author | jim-p <jimp@netgate.com> | 2019-04-01 08:29:44 -0400 |
|---|---|---|
| committer | jim-p <jimp@netgate.com> | 2019-05-10 16:19:37 -0400 |
| commit | ff32782af71967496dabd9f715d9bdbe1951f7f1 (patch) | |
| tree | 23040be4b4b2da47a72a3ae46496032213dd03a7 | |
| parent | 1f5fcdb72ef50ba3064ecdc61bcf481549a6af2e (diff) | |
| download | pfsense-ff32782af71967496dabd9f715d9bdbe1951f7f1.zip pfsense-ff32782af71967496dabd9f715d9bdbe1951f7f1.tar.gz | |
Add parens around NAT reflection rule interface. Fixes #9446
(cherry picked from commit 8800ee6f90d2ac91ca9c2886bd260bc1a4e12893)
| -rw-r--r-- | src/etc/inc/filter.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/etc/inc/filter.inc b/src/etc/inc/filter.inc index c147630..e32a4c3 100644 --- a/src/etc/inc/filter.inc +++ b/src/etc/inc/filter.inc @@ -1369,7 +1369,7 @@ function filter_generate_reflection_nat($rule, &$route_table, $nat_ifs, $protoco /* Do not generate a rule with an interface source if that interface has no IP address. * See https://redmine.pfsense.org/issues/8604 */ if (!empty(get_interface_ip($subnet_if))) { - $natrules .= "no nat on {$subnet_if}{$protocol_text} from {$subnet_if} to {$target}\n"; + $natrules .= "no nat on {$subnet_if}{$protocol_text} from ({$subnet_if}) to {$target}\n"; } $natrules .= "nat on {$subnet_if}{$protocol_text} from {$subnet} to {$target} -> {$ifsubnet_ip}{$static_port}\n"; } |
