From 1330898ed095b42b6aba7ba00f9a6932b241a230 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 12 May 2020 19:23:15 +0200
Subject: nat: T2198: add ipv4-{address,prefix,rage}-exclude validators

Exclude validators are required to support the ! (not) operator on the CLI to
exclude addresses from NAT.
---
 interface-definitions/include/nat-address-port.xml.i | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'interface-definitions/include/nat-address-port.xml.i')

diff --git a/interface-definitions/include/nat-address-port.xml.i b/interface-definitions/include/nat-address-port.xml.i
index 0848364ff..8705d31cb 100644
--- a/interface-definitions/include/nat-address-port.xml.i
+++ b/interface-definitions/include/nat-address-port.xml.i
@@ -25,7 +25,14 @@
       <format>!ipv4range</format>
       <description>Match everything except the specified range</description>
     </valueHelp>
-    <!-- TODO: add general iptables constraint script -->
+    <constraint>
+      <validator name="ipv4-address"/>
+      <validator name="ipv4-prefix"/>
+      <validator name="ipv4-range"/>
+      <validator name="ipv4-address-exclude"/>
+      <validator name="ipv4-prefix-exclude"/>
+      <validator name="ipv4-range-exclude"/>
+    </constraint>
   </properties>
 </leafNode>
 <leafNode name="port">
-- 
cgit v1.2.3