diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-26 21:36:57 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-10-26 21:36:57 +0100 |
| commit | cf084ddad0bcd7fb3b610cd182374bf24f28218a (patch) | |
| tree | 8081a2c70032b2232274c044b2f2a1e518136538 /interface-definitions | |
| parent | c4796091fa8cc685fc2482b23d9fab5c067495a0 (diff) | |
| download | vyos-1x-cf084ddad0bcd7fb3b610cd182374bf24f28218a.tar.gz vyos-1x-cf084ddad0bcd7fb3b610cd182374bf24f28218a.zip | |
cgnat: T9473: reject pool ranges with host bits set
Internal and external pool ranges also accepted a prefix with host bits
set, such as 100.64.0.1/29. Such a value cannot be converted into a
network and crashed the commit with a Python traceback.
These values are now rejected when set; a range is either a network
prefix or an address range.
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/nat_cgnat.xml.in | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/interface-definitions/nat_cgnat.xml.in b/interface-definitions/nat_cgnat.xml.in index 20f0bf7d8..9a0fdee9c 100644 --- a/interface-definitions/nat_cgnat.xml.in +++ b/interface-definitions/nat_cgnat.xml.in @@ -78,7 +78,6 @@ </valueHelp> <constraint> <validator name="ipv4-prefix"/> - <validator name="ipv4-host"/> <validator name="ipv4-range"/> </constraint> </properties> @@ -126,7 +125,6 @@ </valueHelp> <constraint> <validator name="ipv4-prefix"/> - <validator name="ipv4-host"/> <validator name="ipv4-range"/> </constraint> <multi/> |