rules.pl: Move to ipset based data for location based firewall rules.

[ipfire-2.x.git] / config / firewall / firewall-lib.pl

diff --git a/config/firewall/firewall-lib.pl b/config/firewall/firewall-lib.pl
index e7ec30ae0b337234418e5fc013c2641128a0c010..f4089a3a00bea0bff7217314ceecb59d44dadc80 100644 (file)
--- a/config/firewall/firewall-lib.pl
+++ b/config/firewall/firewall-lib.pl
@@ -466,7 +466,7 @@ sub get_address
                        # Get external interface.
                        my $external_interface = &get_external_interface();
 
-                       push(@ret, ["-m geoip --src-cc $value", "$external_interface"]);
+                       push(@ret, ["-m set --match-set CC_$value src", "$external_interface"]);
                }
 
        # Handle rule options with a location as target.
@@ -476,7 +476,7 @@ sub get_address
                        # Get external interface.
                        my $external_interface = &get_external_interface();
 
-                       push(@ret, ["-m geoip --dst-cc $value", "$external_interface"]);
+                       push(@ret, ["-m set --match-set CC_$value dst", "$external_interface"]);
                }
 
        # If nothing was selected, we assume "any".