diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2013-07-25 09:29:26 -0300 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2013-07-25 09:29:26 -0300 |
| commit | ef561db1f552fb4851f1b5e7e2be07291b8337f7 (patch) | |
| tree | cbfbfbec698dae4393a37598374a46d38fea0368 /etc | |
| parent | 7fa503d8f25b161d2d33e63aa7fda9a5bf4c2bd3 (diff) | |
| download | pfsense-ef561db1f552fb4851f1b5e7e2be07291b8337f7.zip pfsense-ef561db1f552fb4851f1b5e7e2be07291b8337f7.tar.gz | |
Fix #3106, parse 'not' rules right on destination for port forward + reflection proxy rules
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/filter.inc | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index d01a4f7..7737b23 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -1180,11 +1180,12 @@ function filter_generate_reflection_proxy($rule, $nordr, $rdr_ifs, $srcaddr, $ds } $dstaddr = explode(" ", $dstaddr_port); - if($dstaddr[2]) - $rflctintrange = $dstaddr[2]; - else + if($dstaddr[2]) { + $rflctintrange = array_pop($dstaddr); + array_pop($dstaddr); + } else return ""; - $dstaddr = $dstaddr[0]; + $dstaddr = implode(" ", $dstaddr); if(empty($dstaddr) || trim($dstaddr) == "0.0.0.0" || strtolower(trim($dstaddr)) == "port") return ""; |
