On Wed, 2011-10-19 at 15:19 +0200, Laurent CARON wrote:
> Hi,
> 
> I'm successfully using shorewall6 for my little network.
> 
> Whenever i'm inputting an IPv6 like: 2001:AABC::/32 shorewall throws an 
> error:
> 
> Compiling /etc/shorewall6/rules...
>     ERROR: Invalid IPv6 address (2001:AABC::) : 
> /usr/share/shorewall/macro.SSH (line 11)
> 
> Whenever i'm putting it in lowercase, it's all fine.

Patch attached. Assuming that your distro installs the Shorewall Perl
modules in /usr/share/shorewall/Shorewall/:

   patch /usr/share/shorewall/Shorewall/IPaddrs.pm < IPv6ADDR.patch

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

diff --git a/Shorewall/Perl/Shorewall/IPAddrs.pm b/Shorewall/Perl/Shorewall/IPAddrs.pm
index 06418ab..3ab7eb9 100644
--- a/Shorewall/Perl/Shorewall/IPAddrs.pm
+++ b/Shorewall/Perl/Shorewall/IPAddrs.pm
@@ -536,7 +536,7 @@ sub valid_6address( $ ) {
     }
 
     return 0 if @address > $max;
-    return 0 unless $address =~ /^[a-f:\d]+$/;
+    return 0 unless $address =~ /^[a-fA-F:\d]+$/;
     return 0 unless ( @address == $max ) || $address =~ /::/;
     return 0 if $address =~ /:::/ || $address =~ /::.*::/;
 

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to