aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2016-07-17 18:01:22 +0300
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2016-07-17 23:50:51 +0300
commit0c5c9c6a2da7ca1c548091cfdc0f96bb006dc100 (patch)
tree567684003076a76ba49fb55fdc2b9108e576fa90
parent187f09be5b81c5682dd45745f309775c77199b98 (diff)
downloadawall-0c5c9c6a2da7ca1c548091cfdc0f96bb006dc100.tar.bz2
awall-0c5c9c6a2da7ca1c548091cfdc0f96bb006dc100.tar.xz
allow dnat and ipsec options simultaneously
-rw-r--r--awall/modules/filter.lua8
1 files changed, 3 insertions, 5 deletions
diff --git a/awall/modules/filter.lua b/awall/modules/filter.lua
index 175ffc1..cd7381a 100644
--- a/awall/modules/filter.lua
+++ b/awall/modules/filter.lua
@@ -1,6 +1,6 @@
--[[
Filter module for Alpine Wall
-Copyright (C) 2012-2015 Kaarle Ritvanen
+Copyright (C) 2012-2016 Kaarle Ritvanen
See LICENSE file for license details
]]--
@@ -224,10 +224,8 @@ function Filter:trules()
if self['no-track'] then
self:error('dnat option not allowed with no-track')
end
- for i, attr in ipairs({'ipsec', 'ipset'}) do
- if self[attr] then
- self:error('dnat and '..attr..' options cannot be used simultaneously')
- end
+ if self.ipset then
+ self:error('dnat and ipset options cannot be used simultaneously')
end
if type(self.dnat) == 'string' then self.dnat = {addr=self.dnat} end