mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-28 11:43:25 +02:00
Forward Firewall: converter now creates cdir format from ip-addresses
This commit is contained in:
committed by
Michael Tremer
parent
5238a8719d
commit
3b81fad442
@@ -335,8 +335,10 @@ sub process_rules
|
|||||||
}elsif ($configline[2] eq 'ip') {
|
}elsif ($configline[2] eq 'ip') {
|
||||||
my $z=&check_ip($configline[5]);
|
my $z=&check_ip($configline[5]);
|
||||||
if($z){
|
if($z){
|
||||||
|
my ($ipa,$subn) = split("/",$z);
|
||||||
|
$subn=&General::iporsubtocidr($subn);
|
||||||
$grp1='src_addr';
|
$grp1='src_addr';
|
||||||
$source=$z;
|
$source="$ipa/$subn";
|
||||||
}else{
|
}else{
|
||||||
print LOG "-> Rule not converted, missing/invalid source ip \"$configline[5]\"\n";
|
print LOG "-> Rule not converted, missing/invalid source ip \"$configline[5]\"\n";
|
||||||
next;
|
next;
|
||||||
@@ -369,8 +371,10 @@ sub process_rules
|
|||||||
if($configline[7] ne ''){
|
if($configline[7] ne ''){
|
||||||
my $address=&check_ip($configline[7]);
|
my $address=&check_ip($configline[7]);
|
||||||
if($address){
|
if($address){
|
||||||
|
my ($dip,$dsub) = split("/",$address);
|
||||||
|
$dsub=&General::iporsubtocidr($dsub);
|
||||||
$grp2='tgt_addr';
|
$grp2='tgt_addr';
|
||||||
$target=$address;
|
$target="$dip/$dsub";
|
||||||
}elsif(!$address){
|
}elsif(!$address){
|
||||||
my $getwebsiteip=&get_ip_from_domain($configline[7]);
|
my $getwebsiteip=&get_ip_from_domain($configline[7]);
|
||||||
if ($getwebsiteip){
|
if ($getwebsiteip){
|
||||||
|
|||||||
Reference in New Issue
Block a user