From 7c8e022c4b3c7d184e4cee8f79b5e7d63f464759 Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 22 Sep 2015 00:26:14 +0100
Subject: [PATCH] firewall: Support multiple subnets per IPsec tunnel

Fixes #10929

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 config/firewall/firewall-lib.pl | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/config/firewall/firewall-lib.pl b/config/firewall/firewall-lib.pl
index b389fac3c3..eabd9a42f2 100644
--- a/config/firewall/firewall-lib.pl
+++ b/config/firewall/firewall-lib.pl
@@ -391,8 +391,9 @@ sub get_address
 	# IPsec networks.
 	} elsif ($key ~~ ["ipsec_net_src", "ipsec_net_tgt", "IpSec Network"]) {
 		my $network_address = &get_ipsec_net_ip($value, 11);
-		if ($network_address) {
-			push(@ret, [$network_address, ""]);
+		my @nets = split(/\|/, $network_address);
+		foreach my $net (@nets) {
+			push(@ret, [$net, ""]);
 		}
 
 	# The firewall's own IP addresses.
-- 
2.39.2