]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commit
projects / people / ms / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e1379d6) | patch
rules.pl: Fix SNAT over VPN.
authorStefan Schantl <stefan.schantl@ipfire.org>
Thu, 20 Feb 2020 16:24:23 +0000 (17:24 +0100)
committerArne Fitzenreiter <arne_f@ipfire.org>
Sat, 21 Mar 2020 16:24:44 +0000 (16:24 +0000)
commitc4b7692ad942d883dbea8f078b2a5c0c1de125f2
tree90900cc0d98d879441e8a41a02b53b0bc2e86e97tree | snapshot
parente1379d6737b148e5ca53c68ea22df299dff37bf9commit | diff
rules.pl: Fix SNAT over VPN.

This commit adds flags which will are applied if SNAT should be used on
the red address or any configured alias.

They prevent doing the SNAT when tranismitting packet through a VPN over the red interface.

Fixes #12162.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Tested-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
config/firewall/rules.pl diff | blob | blame | history
Michael's tree of IPFire 2.x.