Commit 7481a54f authored by Kaarle Ritvanen's avatar Kaarle Ritvanen
Browse files

disallow dnat option with actions other than accept

parent 3911de11
......@@ -36,6 +36,9 @@ function Filter:trules()
local res = {}
if self.dnat then
if self.action ~= 'accept' then
self:error('dnat option not allowed with '..self.action..' action')
if not self.dest then
self:error('Destination address must be specified with DNAT')
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment