Bug #1394: invalid host is processed as IP 255.255.255.255

this patch changes acl processing to not match dst acls if the
destination IP is not known instead of matching as the invalid IP
255.255.255.255.

Forward port of 2.5 patch.

diff --git a/src/ACLDestinationIP.cc b/src/ACLDestinationIP.cc
index d808144fe55bfd5a64626b2ab4cbc28f5cc052d9..a5db7a20a2a4ae5d845efc920e29ac2491a4615c 100644 (file)
--- a/src/ACLDestinationIP.cc
+++ b/src/ACLDestinationIP.cc
@@ -65,7 +65,7 @@ ACLDestinationIP::match(ACLChecklist *checklist)
         checklist->changeState (DestinationIPLookup::Instance());
         return 0;
     } else {
-        return ACLIP::match(no_addr);
+        return 0;
     }
 }