summaryrefslogtreecommitdiff
path: root/templates/firewall/ip-src-route
diff options
context:
space:
mode:
authorzsdc <taras@vyos.io>2022-12-09 17:10:10 +0200
committerzsdc <taras@vyos.io>2022-12-09 17:19:30 +0200
commit1636db20ee4b3d388a25b62e86bea1de52fcc339 (patch)
treea2c189dc38a632fbaafdc8972a0412ea4f6fa73f /templates/firewall/ip-src-route
parent2bc88186b952e32bcf26419af2563c6f1bd7daac (diff)
downloadvyatta-cfg-firewall-1636db20ee4b3d388a25b62e86bea1de52fcc339.tar.gz
vyatta-cfg-firewall-1636db20ee4b3d388a25b62e86bea1de52fcc339.zip
network-groups: T4869: Fixed operations with /32 and /128 netmasks
When the configuration script performs operations with network-group items received from CLI, it gets them in the format fixed by CLI restrictions - always with netmasks. But inside ipset networks with netmasks /32 for IPv4 and /128 for IPv6 for some reason represented as items without netmask. This breaks comparison logic in the configuration script that relies on a direct match between items. This commit adds extra normalization for data received from ipset - an appropriate netmask is added to networks with /32 and /128 netmasks while preparing a hash with items. This allows using hash keys for matching as it is intended to be.
Diffstat (limited to 'templates/firewall/ip-src-route')
0 files changed, 0 insertions, 0 deletions