]> git.ipfire.org Git - people/jschlag/ipfire-2.x.git/commit
BUG10994: SNAT rules are missing the outgoing interface
authorAlexander Marx <alexander.marx@ipfire.org>
Mon, 7 Dec 2015 14:57:32 +0000 (15:57 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 15 Dec 2015 13:53:03 +0000 (13:53 +0000)
commit306098a49811868e2ffc4e19ce8cd62f69a2e9f3
tree38be5494e3857cb49c37956ed18ab085eabcf023
parent08729f79fb7b31326d367a74a50e372e4fb688d7
BUG10994: SNAT rules are missing the outgoing interface

When creating SNAT rules, the outgoing interface is not set. As a side
effect, traffic that should be send unnatted to a vpn tunnel can be
natted which is a BUG.
With this patch the SNAT rules are getting a outgoing interface
according to the configuration. When selecting the RED Target network,
all SNAT rules will be configured with "-o red0". Otherwise if "all" is
selected, there is no interface in the rule, which matches all networks.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/firewall/rules.pl