mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-26 19:00:34 +02:00
Forward Firewall: 0.9.8.7 Implemented SNAT/DNAT
reorganized firewall chains
This commit is contained in:
committed by
Michael Tremer
parent
93b75f31ad
commit
6b681c40d2
@@ -923,7 +923,19 @@ sub checkrule
|
||||
{
|
||||
#check valid port for NAT
|
||||
if($fwdfwsettings{'USE_NAT'} eq 'ON'){
|
||||
#if no port is given in nat area, take target host port
|
||||
if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'grp3'} eq 'TGT_PORT' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$fwdfwsettings{'TGT_PORT'};}
|
||||
|
||||
#check if given nat port is already used by another dnatrule
|
||||
if($fwdfwsettings{'nat'} eq 'dnat'){
|
||||
foreach my $id (sort keys %confignatfw){
|
||||
if ($fwdfwsettings{'dnatport'} eq $confignatfw{$id}[30]){
|
||||
$errormessage=$Lang::tr{'fwdfw natport used'}."<br>";
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
#check if port given in nat area is a single valid port
|
||||
if($fwdfwsettings{'nat'} eq 'dnat' && !&check_natport($fwdfwsettings{'dnatport'})){
|
||||
$errormessage=$Lang::tr{'fwdfw target'}.": ".$Lang::tr{'fwdfw dnat porterr'}."<br>";
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user