Forward Firewall: converter now creates cdir format from ip-addresses

This commit is contained in:
Alexander Marx
2013-01-21 21:47:32 +01:00
committed by Michael Tremer
parent 5238a8719d
commit 3b81fad442

View File

@@ -335,8 +335,10 @@ sub process_rules
}elsif ($configline[2] eq 'ip') { }elsif ($configline[2] eq 'ip') {
my $z=&check_ip($configline[5]); my $z=&check_ip($configline[5]);
if($z){ if($z){
my ($ipa,$subn) = split("/",$z);
$subn=&General::iporsubtocidr($subn);
$grp1='src_addr'; $grp1='src_addr';
$source=$z; $source="$ipa/$subn";
}else{ }else{
print LOG "-> Rule not converted, missing/invalid source ip \"$configline[5]\"\n"; print LOG "-> Rule not converted, missing/invalid source ip \"$configline[5]\"\n";
next; next;
@@ -369,8 +371,10 @@ sub process_rules
if($configline[7] ne ''){ if($configline[7] ne ''){
my $address=&check_ip($configline[7]); my $address=&check_ip($configline[7]);
if($address){ if($address){
my ($dip,$dsub) = split("/",$address);
$dsub=&General::iporsubtocidr($dsub);
$grp2='tgt_addr'; $grp2='tgt_addr';
$target=$address; $target="$dip/$dsub";
}elsif(!$address){ }elsif(!$address){
my $getwebsiteip=&get_ip_from_domain($configline[7]); my $getwebsiteip=&get_ip_from_domain($configline[7]);
if ($getwebsiteip){ if ($getwebsiteip){