check for colons

diff --git a/extensions/libipt_SNAT.c b/extensions/libipt_SNAT.c
index aca4a813ad6bd62847131e9ba1d7d8262f463e9d..f10d0418e2ff8d847dbbda7283fde6eb777502bd 100644 (file)
--- a/extensions/libipt_SNAT.c
+++ b/extensions/libipt_SNAT.c
@@ -65,7 +65,7 @@ static struct ipt_entry_target *
 parse_to(char *arg, int portok, struct ipt_natinfo *info)
 {
        struct ip_nat_range range;
-       char *colon, *dash;
+       char *colon, *dash, *error;
        struct in_addr *ip;
 
        memset(&range, 0, sizeof(range));
@@ -85,6 +85,11 @@ parse_to(char *arg, int portok, struct ipt_natinfo *info)
                        exit_error(PARAMETER_PROBLEM,
                                   "Port `%s' not valid\n", colon+1);
 
+               error = strchr(colon+1, ':');
+               if (error)
+                       exit_error(PARAMETER_PROBLEM,
+                                  "Invalid port:port syntax - use dash\n");
+
                dash = strchr(colon, '-');
                if (!dash) {
                        range.min.tcp.port