-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 10/26/2016 03:44 PM, Steven Jan Springl wrote:
>
> Confirmed, the patch fixes the issue.
>
> ---------------------------------------------------------
>
> The following masq file entry:
>
> +br1::!192.168.23.0/32 10.1.2.0/24!10.1.2.1,10.1.1.4-10.1.1.8
> NONAT icmp !0
>
> is converted to snat entry:
>
> CONTINUE+(NONAT) 10.1.2.0/24!10.1.2.1,10.1.1.4-10.1.1.8
> br1::!192.168.23.0/32 icmp !0
>
> which produces the following error:
>
> ERROR: Invalid ACTION (CONTINUE+(NONAT)) /etc/shorewall200/snat
> (line 16)
>
The attached patch should correct that faulty rule translation.
Thanks, Steven!
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org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=vr7/
-----END PGP SIGNATURE-----
diff --git a/Shorewall/Perl/Shorewall/Nat.pm b/Shorewall/Perl/Shorewall/Nat.pm
index bc24410..f263c3c 100644
--- a/Shorewall/Perl/Shorewall/Nat.pm
+++ b/Shorewall/Perl/Shorewall/Nat.pm
@@ -227,6 +227,7 @@ sub process_one_masq1( $$$$$$$$$$$$ )
fatal_error "'random' may not be specified with 'NONAT'" if $randomize;
$target = 'RETURN';
$add_snat_aliases = 0;
+ $addresses = '-' if $snat;
} elsif ( $addresses ) {
my $addrlist = '';
my @addrs = split_list $addresses, 'address';
------------------------------------------------------------------------------
The Command Line: Reinvented for Modern Developers
Did the resurgence of CLI tooling catch you by surprise?
Reconnect with the command line and become more productive.
Learn the new .NET and ASP.NET CLI. Get your free copy!
http://sdm.link/telerik
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel
