From f7fc17c38a0338a0c09e03ee34edb7823d398483 Mon Sep 17 00:00:00 2001
From: Alexander Marx <amarx@ipfire.org>
Date: Mon, 26 Nov 2012 13:19:07 +0100
Subject: [PATCH] IPSEC: added checkroutine for used OpenVPN subnets/Hosts

---
 html/cgi-bin/vpnmain.cgi | 8 ++++++++
 1 file changed, 8 insertions(+)
 mode change 100644 => 100755 html/cgi-bin/vpnmain.cgi

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
old mode 100644
new mode 100755
index 0fb7c930a7..24aeb6deae
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -1415,6 +1415,14 @@ END
 	    goto VPNCONF_ERROR;
 	}
 
+	
+	if ($cgiparams{'TYPE'} eq 'net'){
+		$errormessage=&General::checksubnets($cgiparams{'NAME'},$cgiparams{'REMOTE_SUBNET'});
+		if ($errormessage ne ''){
+			goto VPNCONF_ERROR;
+		}
+		
+	}
 	if ($cgiparams{'AUTH'} eq 'psk') {
 	    if (! length($cgiparams{'PSK'}) ) {
 		$errormessage = $Lang::tr{'pre-shared key is too short'};
-- 
2.39.5